PT-2019-7011 · Debian+1 · Devscripts+1

Publicado 2018-06-16 · Atualizado 2019-12-06 · CVE-2013-7325

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions devscripts versions prior to 2.13.19

Description An issue exists in uscan in devscripts, which could let a remote malicious user execute arbitrary code via a crafted tarball.

Recommendations For versions prior to 2.13.19, update to version 2.13.19 or later to resolve the issue. As a temporary workaround, consider restricting the use of uscan to minimize the risk of exploitation. Avoid using uscan with untrusted or crafted tarballs until the issue is resolved.

Correção

Identificadores relacionados

ALT-PU-2018-1905

CVE-2013-7325

DSA-2836-1

Produtos afetados

Alt Linux

Devscripts

Referências · 16

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5704 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7050 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7325 · Nota
• https://osv.dev/vulnerability/CVE-2013-7325 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-7325 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7325 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5705 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/02/12/14 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-7325 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-02344 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2013-7325 · Nota
• https://bdu.fstec.ru/vul/2015-02662 · Nota de Segurança
• https://t.me/cibsecurity/8479 · Publicação no Telegram
• https://security-tracker.debian.org/tracker/CVE-2013-7325 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6888 · Nota de Segurança