2 matches found
netfilter: ipset: fix race between dump and ip_set_list resize
...
7.8CVSS5.4AI score0.00126EPSS
SaveExploits0
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal through the dump process when handling attacker-controlled message IDs via the --http interface. An attacker can write arbitrary files to the filesystem by supplying crafted message IDs that exploit path traversal...
6CVSS8.2AI score0.00389EPSS
SaveExploits1References3
20