Squashfs-tools Project

Squashfs-tools

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2021-41072

Exploit
  • EPSS 3.59%
  • Published 14.09.2021 01:15:07
  • Last modified 21.11.2024 06:25:22

squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a fi...

8.1

CVE-2021-40153

Exploit
  • EPSS 0.54%
  • Published 27.08.2021 15:15:09
  • Last modified 21.11.2024 06:23:40

squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination dire...