Lucene search
PRIOn knowledge basePRION:CVE-2022-4510HistoryJan 26, 2023 - 9:18 p.m.
Path traversal
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
3
refirm labs binwalk
version 2.1.2b - 2.3.3
path traversal
remote code execution
pfs filesystem
vulnerability
unpfs.py
0.267 Low
EPSS
Percentile
96.8%
A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk’s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins.
This vulnerability is associated with program files src/binwalk/plugins/unpfs.py.
This issue affects binwalk from 2.1.2b through 2.3.3 included.
Related
debiancve
debiancve
CVE-2022-4510
2023-01-26 21:18:06
ubuntucve
ubuntucve
CVE-2022-4510
2023-01-26 00:00:00
osv
osv
CVE-2022-4510
2023-01-26 21:18:06
binwalk - security update
2023-02-23 00:00:00
Path traversal in binwalk
2023-01-26 21:30:20
packetstorm
packetstorm
Binwalk 2.3.2 Remote Command Execution
2023-04-06 00:00:00
nessus
nessus
GLSA-202309-07 : Binwalk: Multiple Vulnerabilities
2023-09-17 00:00:00
Fedora 36 : binwalk (2023-23047a5f4f)
2023-02-04 00:00:00
Fedora 37 : binwalk (2023-32eb9d8ee7)
2023-02-04 00:00:00
githubexploit
githubexploit
Exploit for Path Traversal in Microsoft
2023-07-01 01:54:35
Exploit for Path Traversal in Microsoft
2023-07-01 02:00:39
Exploit for Path Traversal in Microsoft
2023-06-27 02:20:13
saint
saint
Zyxel zhttpd and libclinkc.so buffer overflows
2023-01-17 00:00:00
Zyxel zhttpd and libclinkc.so buffer overflows
2023-01-17 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: binwalk-2.3.3-3.fc36
2023-02-05 01:56:13
[SECURITY] Fedora 37 Update: binwalk-2.3.3-3.fc37
2023-02-05 01:50:01
debian
debian
[SECURITY] [DLA 3339-1] binwalk security update
2023-02-23 19:45:33
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0074)
2023-03-28 00:00:00
Fedora: Security Advisory for binwalk (FEDORA-2023-23047a5f4f)
2023-02-05 00:00:00
Fedora: Security Advisory for binwalk (FEDORA-2023-32eb9d8ee7)
2023-02-05 00:00:00
nvd
nvd
CVE-2022-4510
2023-01-26 21:18:06
cve
cve
CVE-2022-4510
2023-01-26 21:18:06
mageia
mageia
Updated binwalk packages fix security vulnerability
2023-03-02 00:14:31
veracode
veracode
Path Traversal
2023-03-13 01:02:44
gentoo
gentoo
Binwalk: Multiple Vulnerabilities
2023-09-17 00:00:00
cvelist
cvelist
CVE-2022-4510 Path Traversal in binwalk
2023-01-25 12:25:14
github
github
Path traversal in binwalk
2023-01-26 21:30:20
zdt
zdt
Binwalk v2.3.2 - Remote Command Execution Exploit
2023-04-05 00:00:00
exploitdb
exploitdb
Binwalk v2.3.2 - Remote Command Execution (RCE)
2023-04-05 00:00:00