Directory Traversal Vulnerabilities in pigz by Mark Adler
CVE-2015-1191

Currently unrated

Key Information:

Vendor

Zlib

Status
Pigz
Vendor
CVE Published:
21 January 2015

What is CVE-2015-1191?

Multiple directory traversal vulnerabilities exist in pigz 2.3.1, enabling remote attackers to write to arbitrary files through a full pathname or by exploiting the '..' (dot dot) notation in an archive. This flaw could potentially allow unauthorized access to the system, raising serious security concerns for users of the affected product.

References

http://lists.opensuse.org/opensuse-updates/2016-03/msg000...
vendor-advisoryx_refsource_SUSE
https://github.com/madler/pigz/commit/fdad1406b3ec809f495...
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/01/18/3
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.