Lucene search
+L

87 matches found

Prion
Prion
•added 2021/03/11 10:15 p.m.•40 views

Design/Logic Flaw

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

5CVSS6.9AI score0.02622EPSS
SaveExploits1References6Affected Software3
OSV
OSV
•added 2021/03/11 10:15 p.m.•17 views

UBUNTU-CVE-2021-28153

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

5.3CVSS6.8AI score0.02622EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/03/11 10:15 p.m.•43 views

CVE-2021-28153

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

5.3CVSS6.8AI score0.02622EPSS
SaveExploits1References2
Mend
Mend
•added 2021/03/11 9:04 p.m.•2 views

CVE-2021-28153

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

6.9CVSS0.02622EPSS
SaveExploits1References12
GitLab Advisory Database
GitLab Advisory Database
•added 2021/03/11 12:00 a.m.•55 views

Improper Link Resolution Before File Access

When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled...

5.3CVSS6.8AI score0.02622EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/11 12:00 a.m.•5 views

CVE-2021-28153: Improper Link Resolution Before File Access

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

5.3CVSS6.7AI score0.02622EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/03/10 12:00 a.m.•17 views

PT-2021-5823 · Gnome +9 · Gnome Glib +9

Name of the Vulnerable Software and Affected Versions: GNOME GLib versions prior to 2.66.8 Description: An issue was discovered in GNOME GLib when the g file replace function is used with G FILE CREATE REPLACE DESTINATION to replace a path that is a dangling symlink. It incorrectly creates the...

7.8CVSS6.5AI score0.0408EPSS
SaveExploits3References123
Rows per page
Query Builder