Yum · Yum-Utils · CVE-2018-10897
**Name of the Vulnerable Software and Affected Versions**
yum-utils versions 1.1.31 and older
**Description**
A directory traversal issue exists in reposync, a part of yum-utils, due to insufficient path sanitization in remote repository configuration files. This allows an attacker controlling a repository to potentially copy files outside the destination directory on a targeted system via path traversal. If reposync runs with heightened privileges, this flaw could result in system compromise by overwriting critical system files. The issue may enable a remote attacker to create, modify, or delete arbitrary files.
**Recommendations**
For versions 1.1.31 and older, at the moment, there is no information about a newer version that contains a fix for this vulnerability.