Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/12/27 12:30 p.m.33 views

binwalk vulnerable to UNIX Symbolic Link (Symlink) Following

A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the...

6.5CVSS1.9AI score0.0171EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/12/27 12:30 p.m.17 views

GHSA-8M3F-G62J-3VX8 binwalk vulnerable to UNIX Symbolic Link (Symlink) Following

A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the...

6.5CVSS5.6AI score0.0171EPSS
Exploits0References7
NVD
NVD
added 2022/12/27 11:15 a.m.11 views

CVE-2021-4287

A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the...

6.5CVSS0.0171EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/12/27 11:15 a.m.16 views

CVE-2021-4287

A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the...

6.5CVSS5.3AI score0.0171EPSS
Exploits0References3
CVE
CVE
added 2022/12/27 10:32 a.m.75 views

CVE-2021-4287

CVE-2021-4287 affects ReFirm Labs binwalk up to version 2.3.2; the issue is in src/binwalk/modules/extractor.py of the Archive Extraction Handler, where manipulation leads to symlink following and enables a remote attack. A fix is available in binwalk 2.3.3, with patch name fa0c0bd59b858881475694...

6.5CVSS5.6AI score0.0171EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2022/12/27 10:32 a.m.14 views

CVE-2021-4287

A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the...

6.5CVSS5.3AI score0.0171EPSS
Exploits0
Rows per page
Query Builder