1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
Candidate: CVE-2015-1191
PublicDate: 2015-01-21
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1191
https://github.com/madler/pigz/commit/fdad1406b3ec809f4954ff7cdf9e99eb18c2458f
Description:
Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote
attackers to write to arbitrary files via a (1) full pathname or (2) ..
(dot dot) in an archive.
Ubuntu-Description:
Notes:
Bugs:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774978
Priority: medium
Discovered-by:
Assigned-to:
Patches_pigz:
upstream_pigz: not-affected (2.3.1-2)
lucid_pigz: ignored (reached end-of-life)
precise_pigz: ignored (reached end-of-life)
precise/esm_pigz: DNE (precise was needs-triage)
trusty_pigz: needs-triage
utopic_pigz: ignored (reached end-of-life)
vivid_pigz: ignored (reached end-of-life)
vivid/stable-phone-overlay_pigz: DNE
vivid/ubuntu-core_pigz: DNE
wily_pigz: ignored (reached end-of-life)
xenial_pigz: not-affected (2.3.1-2)
yakkety_pigz: not-affected (2.3.1-2)
zesty_pigz: not-affected
devel_pigz: not-affected
|