Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-10173 →
DEBIAN-CVE-2016-10173
Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ruby-minitar
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-3.1"}]}]
Debian:13
ruby-minitar
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-3.1"}]}]
Debian:14
ruby-minitar
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-3.1"}]}]
Références
- advisory security-tracker.debian.org