Lucene search
K

4 matches found

Prion
Prion
added 2024/01/31 5:15 p.m.13 views

Design/Logic Flaw

stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1, it is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary director...

7.5CVSS5.3AI score0.00072EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 4:40 p.m.11 views

CVE-2024-24579 Tar path traversal in stereoscope when processing OCI tar archives

stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1, it is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary director...

5.3CVSS6.7AI score0.00072EPSS
Exploits0References2
OSV
OSV
added 2024/01/31 4:40 p.m.17 views

CVE-2024-24579 Tar path traversal in stereoscope when processing OCI tar archives

stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1, it is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary director...

5.3CVSS9.2AI score0.00072EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/01/31 4:40 p.m.17 views

CVE-2024-24579 Tar path traversal in stereoscope when processing OCI tar archives

stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1, it is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary director...

5.3CVSS9.7AI score0.00072EPSS
Exploits0References2
Rows per page
Query Builder