GHSA-mwc7-wm76-6x7w

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 7.2

Описание

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.

Ссылки

EPSS

Процентиль: 68%

0.00568

Низкий

7.2 High

CVSS3

CVE ID

CVE-2010-4226

Дефекты

CWE-59

Связанные уязвимости

CVE-2010-4226

CVSS3: 7.2

nvd

почти 12 лет назад

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.

CVE-2010-4226

CVSS3: 7.2

msrc

4 месяца назад

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.

openSUSE-SU-2017:3259-1

suse-cvrf

около 8 лет назад

Security update for the OBS toolchain

SUSE-SU-2017:3253-1

suse-cvrf

около 8 лет назад

Fixing security issues on OBS toolchain

EPSS

Процентиль: 68%

0.00568

Низкий

7.2 High

CVSS3

CVE ID

CVE-2010-4226

Дефекты

CWE-59