Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-7951

Опубликовано: 20 фев. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 2.1
CVSS3: 4.6

Описание

Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android device to write to arbitrary files owned by system via a .. (dot dot) in the tar archive headers.

РелизСтатусПримечание
bionic

not-affected

6.0.1+72-5
devel

not-affected

6.0.1+72-5
eoan

not-affected

6.0.1+72-5
esm-apps/bionic

not-affected

6.0.1+72-5
esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

upstream

released

6.0.1+72-5
xenial

DNE

Показывать по

EPSS

Процентиль: 83%
0.01965
Низкий

2.1 Low

CVSS2

4.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.6
nvd
почти 6 лет назад

Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android device to write to arbitrary files owned by system via a .. (dot dot) in the tar archive headers.

CVSS3: 4.6
github
больше 3 лет назад

Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android device to write to arbitrary files owned by system via a .. (dot dot) in the tar archive headers.

EPSS

Процентиль: 83%
0.01965
Низкий

2.1 Low

CVSS2

4.6 Medium

CVSS3