Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-6306

Опубликовано: 24 фев. 2017
Источник: debian
EPSS Низкий

Описание

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c."

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libytneffixed1.9.1-1package
libytnefnot-affectedwheezypackage

Примечания

  • https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/

  • https://www.openwall.com/lists/oss-security/2017/02/15/4

  • fixed in https://github.com/Yeraze/ytnef/commit/b36d6b25b7a546fc28d6c3812124e487987a4910

EPSS

Процентиль: 64%
0.00471
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 9 лет назад

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c."

CVSS3: 7.8
nvd
почти 9 лет назад

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c."

CVSS3: 7.8
github
больше 3 лет назад

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c."

EPSS

Процентиль: 64%
0.00471
Низкий