Описание
In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| fdupes | fixed | 1:2.2.1-1 | package | |
| fdupes | no-dsa | bullseye | package | |
| fdupes | postponed | buster | package |
Примечания
https://bugzilla.suse.com/show_bug.cgi?id=1200381
https://github.com/adrianlopezroche/fdupes/commit/85680897148f1ac33b55418e00334116e419717f (v2.2.0)
EPSS
Процентиль: 12%
0.00041
Низкий
Связанные уязвимости
CVSS3: 6
ubuntu
почти 2 года назад
In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
CVSS3: 6
nvd
почти 2 года назад
In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
CVSS3: 6
github
почти 2 года назад
In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
EPSS
Процентиль: 12%
0.00041
Низкий