CVE-2014-9485

Опубликовано: 16 янв. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive.

Ссылки

http://www.openwall.com/lists/oss-security/2014/12/31/11
Issue Tracking
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/03/16
Issue Tracking
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/01/24/10
http://www.securityfocus.com/bid/71846
Third Party Advisory
VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774321
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/12/31/11
Issue Tracking
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/03/16
Issue Tracking
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/01/24/10
http://www.securityfocus.com/bid/71846
Third Party Advisory
VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774321
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:minizip_project:minizip:*:*:*:*:*:*:*:*

Версия до 1.1-4 (включая)

EPSS

Процентиль: 82%

0.01731

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2014-9485

CVSS3: 5.5

ubuntu

около 8 лет назад

CVE-2014-9485

CVSS3: 5.5

debian

около 8 лет назад

Directory traversal vulnerability in the do_extract_currentfile functi ...

GHSA-jx5r-f949-99mv

CVSS3: 5.5

github

больше 3 лет назад

EPSS

Процентиль: 82%

0.01731

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-22