PT-2020-21459 · Deasyncp · Deasyncp

Published

2020-09-03

·

Updated

2020-09-03

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions deasyncp versions (affected versions not specified)
Description The issue concerns malicious code within the deasyncp package, which causes the machine to shut down upon installation due to a preinstall script.
Recommendations Remove the package from your environment. There is no further compromise.

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

GHSA-QFC9-X7GV-27JR

Affected Products

Deasyncp