Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-37885

Опубликовано: 14 июн. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 7.8

Описание

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment. It is recommended that the Nextcloud Desktop client is upgraded to 3.12.0.

РелизСтатусПримечание
devel

not-affected

macOS only
esm-apps/focal

not-affected

macOS only
esm-apps/jammy

not-affected

macOS only
esm-apps/noble

not-affected

macOS only
focal

not-affected

macOS only
jammy

not-affected

macOS only
mantic

not-affected

macOS only
noble

not-affected

macOS only
upstream

not-affected

debian: Only affects Nextcloud Desktop Client on macOS

Показывать по

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment. It is recommended that the Nextcloud Desktop client is upgraded to 3.12.0.

CVSS3: 7.8
debian
больше 2 лет назад

The Nextcloud Desktop Client is a tool to synchronize files from Nextc ...

CVSS3: 7.8
altlinux
больше 2 лет назад

ALT-PU-2024-4303: package `nextcloud-client` update to version 3.12.2-alt1

7.8 High

CVSS3