Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2621-1
HistoryJul 30, 2024 - 4:17 a.m.

Security update for devscripts

2024-07-3004:17:53
Google
osv.dev
devscripts
security
update
cve-2014-1833
symlink
directory traversal
uupdate

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

High

This update for devscripts fixes the following issues:

  • CVE-2014-1833: Fixed symlink directory traversal in uupdate (bsc#861514)

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

High