Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-8244

Опубликовано: 06 авг. 2025
Источник: ubuntu
Приоритет: medium
CVSS3: 3.7

Описание

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

deferred

2025-09-25
esm-infra-legacy/xenial

deferred

2025-09-25
esm-infra/bionic

deferred

2025-09-25
esm-infra/xenial

ignored

end of ESM support, was deferred [2025-09-25]
jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

deferred

2025-09-25
esm-apps/bionic

deferred

2025-09-25
esm-apps/jammy

deferred

2025-09-25
esm-apps/xenial

ignored

end of ESM support, was deferred [2025-09-25]
esm-infra/focal

deferred

2025-09-25
jammy

deferred

2025-09-25
noble

DNE

plucky

DNE

questing

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

deferred

2025-09-25
jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

resolute

DNE

upstream

deferred

2025-09-25

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

deferred

2025-09-25
esm-apps/focal

deferred

2025-09-25
jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

resolute

DNE

upstream

deferred

2025-09-25

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

deferred

2025-09-25
noble

DNE

plucky

DNE

questing

DNE

resolute

DNE

upstream

deferred

2025-09-25

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

deferred

2025-09-25
esm-apps/bionic

deferred

2025-09-25
esm-apps/focal

deferred

2025-09-25
esm-apps/xenial

ignored

end of ESM support, was deferred [2025-09-25]
jammy

deferred

2025-09-25
noble

DNE

plucky

DNE

questing

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

deferred

2025-09-25
esm-apps/jammy

deferred

2025-09-25
jammy

deferred

2025-09-25
noble

DNE

plucky

DNE

questing

DNE

resolute

DNE

upstream

deferred

2025-09-25

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

deferred

2025-09-25
esm-apps/jammy

deferred

2025-09-25
esm-apps/noble

deferred

2025-09-25
jammy

deferred

2025-09-25
noble

deferred

2025-09-25
plucky

DNE

questing

DNE

resolute

DNE

upstream

deferred

2025-09-25

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

deferred

2025-09-25
esm-apps/jammy

deferred

2025-09-25
jammy

deferred

2025-09-25
noble

deferred

2025-09-25
plucky

DNE

questing

DNE

resolute

DNE

upstream

deferred

2025-09-25

Показывать по

РелизСтатусПримечание
devel

deferred

2025-09-25
esm-apps/jammy

deferred

2025-09-25
esm-apps/noble

deferred

2025-09-25
esm-apps/resolute

deferred

2025-09-25
jammy

deferred

2025-09-25
noble

deferred

2025-09-25
plucky

ignored

end of life, was deferred [2025-09-25]
questing

ignored

end of life, was deferred [2025-09-25]
resolute

deferred

2025-09-25
upstream

deferred

2025-09-25

Показывать по

РелизСтатусПримечание
devel

deferred

2025-09-25
esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

plucky

ignored

end of life, was deferred [2025-09-25]
questing

ignored

end of life, was deferred [2025-09-25]
resolute

deferred

2025-09-25
upstream

deferred

2025-09-25

Показывать по

3.7 Low

CVSS3

Связанные уязвимости

CVSS3: 5.6
redhat
около 1 года назад

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.

CVSS3: 3.7
nvd
около 1 года назад

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.

CVSS3: 3.7
debian
около 1 года назад

The filepath.Walk and filepath.WalkDir functions are documented as not ...

CVSS3: 6.5
github
около 1 года назад

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.

3.7 Low

CVSS3