Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f3fh-cjxj-26mw

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

EPSS

Процентиль: 36%
0.00152
Низкий

Связанные уязвимости

ubuntu
почти 12 лет назад

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

nvd
почти 12 лет назад

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

debian
почти 12 лет назад

The bzexe command in bzip2 1.0.5 and earlier generates compressed exec ...

EPSS

Процентиль: 36%
0.00152
Низкий