Количество 10
Количество 10
BDU:2022-01463
Уязвимость библиотеки архивирования libarchive, связанная с отслеживанием символьных ссылок, позволяющая нарушителю повысить свои привилегии
ROS-20220322-02
Множественные уязвимости libarchive
CVE-2021-23177
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges.
CVE-2021-23177
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges.
CVE-2021-23177
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges.
CVE-2021-23177
An improper link resolution flaw while extracting an archive can lead ...
SUSE-SU-2022:3393-1
Security update for libarchive
SUSE-SU-2022:3306-1
Security update for libarchive
GHSA-fq9q-7wp8-gpr7
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges.
ELSA-2022-0892
ELSA-2022-0892: libarchive security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-01463 Уязвимость библиотеки архивирования libarchive, связанная с отслеживанием символьных ссылок, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.3 | 0% Низкий | больше 3 лет назад |
 | ROS-20220322-02 Множественные уязвимости libarchive | около 3 лет назад | ||
 | CVE-2021-23177 An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges. | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
 | CVE-2021-23177 An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges. | CVSS3: 7.3 | 0% Низкий | почти 4 года назад |
 | CVE-2021-23177 An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges. | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
| CVE-2021-23177 An improper link resolution flaw while extracting an archive can lead ... | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
 | SUSE-SU-2022:3393-1 Security update for libarchive | 0% Низкий | больше 2 лет назад | |
| SUSE-SU-2022:3306-1 Security update for libarchive | 0% Низкий | почти 3 года назад | |
| GHSA-fq9q-7wp8-gpr7 An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges. | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
| ELSA-2022-0892 ELSA-2022-0892: libarchive security update (MODERATE) | больше 3 лет назад |
Уязвимостей на страницу