Linuxfoundation

The Update Framework

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2021-41131

  • EPSS 0.64%
  • Published 19.10.2021 18:15:07
  • Last modified 21.11.2024 06:25:32

python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vulnerability that in the worst case can overwrite files ending in `.json` anywhere on the cli...

8.2

CVE-2020-15163

  • EPSS 0.14%
  • Published 09.09.2020 18:15:22
  • Last modified 21.11.2024 05:04:58

Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new ...

9.8

CVE-2020-6174

  • EPSS 0.2%
  • Published 05.02.2020 16:15:11
  • Last modified 21.11.2024 05:35:14

TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.

5.3

CVE-2020-6173

Exploit
  • EPSS 0.17%
  • Published 14.01.2020 19:15:13
  • Last modified 21.11.2024 05:35:14

TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.