Описание
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.25-2ubuntu1 |
| esm-infra-legacy/trusty | released | 2.24-5ubuntu3.1 |
| lucid | released | 2.20.1-3ubuntu7.2 |
| precise | released | 2.22-6ubuntu1.2 |
| trusty | released | 2.24-5ubuntu3.1 |
| trusty/esm | released | 2.24-5ubuntu3.1 |
| upstream | needs-triage | |
| utopic | released | 2.24.90.20141014-0ubuntu3.1 |
Показывать по
3.6 Low
CVSS2
Связанные уязвимости
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and ...
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.
ELSA-2015-2079: binutils security, bug fix, and enhancement update (MODERATE)
3.6 Low
CVSS2