Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dmnks

#27633of 53,632
9.3Total CVSS
Vulnerabilities · 1
PT-2018-2217
9.3
2018-07-30
Yum · Yum-Utils · CVE-2018-10897
**Name of the Vulnerable Software and Affected Versions** yum-utils versions 1.1.31 and older **Description** A directory traversal issue exists in reposync, a part of yum-utils, due to insufficient path sanitization in remote repository configuration files. This allows an attacker controlling a repository to potentially copy files outside the destination directory on a targeted system via path traversal. If reposync runs with heightened privileges, this flaw could result in system compromise by overwriting critical system files. The issue may enable a remote attacker to create, modify, or delete arbitrary files. **Recommendations** For versions 1.1.31 and older, at the moment, there is no information about a newer version that contains a fix for this vulnerability.