fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

PT-2020-6230 · Libslirp +8 · Libslirp +8

Name of the Vulnerable Software and Affected Versions: libslirp versions 4.2.0 and prior releases Description: The issue is related to a use after free vulnerability in the ip reass function in ip input.c of the libslirp library. This vulnerability can be exploited by crafted packets, leading to ...