846 matches found
Ubuntu 18.04 LTS / 20.04 LTS : Squashfs-Tools vulnerability (USN-5078-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5078-1 advisory. Richard Weinberger discovered that Squashfs-Tools mishandled certain malformed SQUASHFS files. An attacker could use this vulnerability to write...
Ubuntu 16.04 ESM : Squashfs-Tools vulnerabilities (USN-5078-2)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5078-2 advisory. USN-5078-1 fixed several vulnerabilities in Squashfs-Tools. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the...
ALPINE-CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
AZL-7464 CVE-2021-41072 affecting package squashfs-tools for versions less than 4.5.1-1
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
Directory traversal
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
CVE-2021-41072
CVE-2021-41072 affects squashfs-tools (unsquash-2.c and related code paths). A crafted Squashfs filesystem containing a symbolic link and subsequent content can cause unsquashfs to create/write through the link outside the destination directory, i.e., Directory Traversal. Impact is potential writ...
squashfs-tools 后置链接漏洞
squashfs-tools is an open source software package. A security vulnerability in squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 arises from the fact that a well-designed squashfs filesystem contains a symbolic link, and then the contents of the same filesystem under the same filename causes...
CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
UBUNTU-CVE-2021-41072
squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create th...
Debian: Security Advisory (DSA-4967-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for squashfs-tools (FEDORA-2021-cdbd827c1e)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] [DSA 4967-1] squashfs-tools security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4967-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4967-1] squashfs-tools security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4967-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2021 https://www.debian.org/security/faq -...