Описание
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | not-affected | MacOS only |
| eoan | not-affected | MacOS only |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | not-affected | debian: MacOS-specific |
| xenial | DNE |
Показывать по
EPSS
4.6 Medium
CVSS2
6.7 Medium
CVSS3
Связанные уязвимости
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed t ...
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
ALT-PU-2020-4292: package `nextcloud-client` update to version 2.6.4-alt2
EPSS
4.6 Medium
CVSS2
6.7 Medium
CVSS3