Lucene search
+L

1 matches found

OSV
OSV
added 2024/01/31 4:40 p.m.28 views

CVE-2024-24579 Tar path traversal in stereoscope when processing OCI tar archives

stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1, it is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary director...

5.3CVSS9.2AI score
SaveExploits0References4
Rows per page
Query Builder