Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-3683

Критический

ALT-PU-2018-3683: package libquazip update to version 0.7.6-alt1

Источник
errata.altlinux.org
Дата публикации
08.04.2024
Дата обновления
08.04.2024
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libquazip to version 0.7.6-alt1.

Устраненные уязвимости2

Ссылки1

ALT-PU-2018-3683https://errata.altlinux.org/ALT-PU-2018-3683

Связанные уязвимости

ubuntu логотип

CVE-2018-1002209

CVSS3: 5.5
ubuntu
больше 8 лет назад

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

nvd логотип

CVE-2018-1002209

CVSS3: 5.5
nvd
больше 8 лет назад

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

debian логотип

CVE-2018-1002209

CVSS3: 5.5
debian
больше 8 лет назад

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing att ...

github логотип

GHSA-6f6v-x2xf-m89x

CVSS3: 5.5
github
больше 4 лет назад

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

fstec логотип

BDU:2018-00933

CVSS3: 9.6
fstec
больше 8 лет назад

Уязвимость функции extractDir компонента JICompress библиотеки QuaZIP, позволяющая нарушителю выполнить произвольный код