Описание
Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version 5.12.21 which addresses the issue. There are no known workarounds for this vulnerability.
Ссылки
- Patch
- ExploitThird Party Advisory
- Patch
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.12.21 (исключая)
cpe:2.3:a:deepin:deepin-compressor:*:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00427
Низкий
9.3 Critical
CVSS3
7.8 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 9.3
debian
около 2 лет назад
Deepin-Compressor is the default archive manager of Deepin Linux OS. P ...
EPSS
Процентиль: 62%
0.00427
Низкий
9.3 Critical
CVSS3
7.8 High
CVSS3
Дефекты
CWE-22