Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-37372

Опубликовано: 09 янв. 2025
Источник: ubuntu
Приоритет: medium
CVSS3: 3.6

Описание

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

РелизСтатусПримечание
devel

not-affected

Only affects Windows
esm-apps-legacy/xenial

not-affected

Only affects Windows
esm-apps/bionic

not-affected

Only affects Windows
esm-apps/focal

not-affected

Only affects Windows
esm-apps/jammy

not-affected

Only affects Windows
esm-apps/noble

not-affected

Only affects Windows
esm-apps/xenial

not-affected

Only affects Windows
esm-infra-legacy/trusty

not-affected

Only affects Windows
focal

not-affected

Only affects Windows
jammy

not-affected

Only affects Windows

Показывать по

3.6 Low

CVSS3

Связанные уязвимости

CVSS3: 3.6
redhat
почти 2 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
nvd
почти 2 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

msrc
около 1 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
debian
почти 2 года назад

The Permission Model assumes that any path starting with two backslash ...

CVSS3: 3.6
github
почти 2 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

3.6 Low

CVSS3