Опубликовано: 03 авг. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 3.3
Описание
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 4:17.12.3-0ubuntu1.1 |
| devel | not-affected | 4:20.04.3-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | released | 4:17.12.3-0ubuntu1.1 |
| esm-apps/focal | released | 4:19.12.3-0ubuntu1.1 |
| esm-apps/jammy | not-affected | 4:20.04.3-1 |
| esm-apps/noble | not-affected | 4:20.04.3-1 |
| esm-apps/resolute | not-affected | 4:20.04.3-1 |
| esm-apps/xenial | ignored | end of ESM support, was needed |
| esm-infra-legacy/trusty | DNE |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 75%
0.01706
Низкий
4.3 Medium
CVSS2
3.3 Low
CVSS3
Связанные уязвимости
CVSS3: 3.3
redhat
около 6 лет назад
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.
CVSS3: 3.3
nvd
около 6 лет назад
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.
CVSS3: 3.3
debian
около 6 лет назад
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can ...
EPSS
Процентиль: 75%
0.01706
Низкий
4.3 Medium
CVSS2
3.3 Low
CVSS3