Опубликовано: 06 сент. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5
Описание
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.15.8 |
| esm-infra-legacy/trusty | not-affected | pre-2.15.5 |
| precise | not-affected | pre-2.15.5 |
| trusty | not-affected | pre-2.15.5 |
| trusty/esm | not-affected | pre-2.15.5 |
| upstream | released | 2.15.8 |
| vivid | not-affected | pre-2.15.5 |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 87%
0.03118
Низкий
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
почти 9 лет назад
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
CVSS3: 7.5
debian
почти 9 лет назад
Argument injection vulnerability in devscripts before 2.15.7 allows re ...
CVSS3: 7.5
github
больше 4 лет назад
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
EPSS
Процентиль: 87%
0.03118
Низкий
5 Medium
CVSS2
7.5 High
CVSS3