Описание
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | not-affected | |
| disco | not-affected | |
| esm-apps/bionic | not-affected | |
| esm-apps/xenial | released | 5.18.0-0ubuntu1.1 |
| esm-infra-legacy/trusty | DNE | |
| precise | DNE | |
| precise/esm | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 4:4.14.34-0ubuntu2 |
| bionic | not-affected | 4:4.14.34-0ubuntu2 |
| cosmic | not-affected | 4:4.14.34-0ubuntu2 |
| devel | DNE | |
| disco | not-affected | 4:4.14.34-0ubuntu2 |
| esm-apps/bionic | not-affected | 4:4.14.34-0ubuntu2 |
| esm-apps/xenial | released | 4:4.14.16-0ubuntu3.3 |
| esm-infra-legacy/trusty | released | 4:4.13.3-0ubuntu0.3 |
| precise | released | 4:4.8.5-0ubuntu0.5 |
| precise/esm | DNE | precise was released [4:4.8.5-0ubuntu0.5] |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.
Directory traversal vulnerability in KArchive before 5.24, as used in ...
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.
EPSS
5 Medium
CVSS2
7.5 High
CVSS3