[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250039

 
 

909

 
 

195882

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2MONO-2023-001 --- mono

ID: oval:org.secpod.oval:def:1701741Date: (C)2023-10-26   (M)2023-10-26
Class: PATCHFamily: unix




SharpZipLib is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory of `destFolder`. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3

Platform:
Amazon Linux 2
Product:
mono
ibm-data-db2
Reference:
ALAS2MONO-2023-001
CVE-2021-32840
CVE    1
CVE-2021-32840
CPE    2
cpe:/a:mono:mono
cpe:/o:amazon:linux:2

© SecPod Technologies