PT-2018-5724 · Build+1 · Build+1
Publicado
2017-12-08
·
Atualizado
2019-10-09
·
CVE-2017-14804
CVSS v3.1
9.9
Crítica
| Vetor | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
build package versions prior to 20171128
Description:
The issue allows untrusted builds to write outside of the target system, enabling escape out of buildroots, due to a lack of directory name checks during the extraction of build results.
Recommendations:
For versions prior to 20171128, update to a version that includes the fix for this issue to prevent untrusted builds from writing outside the target system.
Correção
RCE
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Suse
Build