tukaani xz 4.999.9 beta

CPE Details

tukaani xz 4.999.9 beta
tukaani
xz
4.999.9
2018-03-05
14h54 +00:00
2018-03-05
14h54 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:tukaani:xz:4.999.9:beta:*:*:*:*:*:*

Informations

Vendor

tukaani

Product

xz

Version

4.999.9

Update

beta

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-1271 2022-08-31 13h33 +00:00 An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.
8.8
Haute
CVE-2015-4035 2017-07-25 16h00 +00:00 scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name.
7.8
Haute