CVE-2017-0359 diffoscope writes to arbitrary locations on disk based on the contents of an untrusted archive
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi diffoscope(PyPI) | < 76 | 76 |
| pypi diffoscope(PyPI) | = 39 | No fix listed |
| pypi diffoscope(PyPI) | = 40 | No fix listed |
| pypi diffoscope(PyPI) | = 41 | No fix listed |
| pypi diffoscope(PyPI) | = 42 | No fix listed |
| pypi diffoscope(PyPI) | = 43 | No fix listed |
| pypi diffoscope(PyPI) | = 44 | No fix listed |
| pypi diffoscope(PyPI) | = 45 | No fix listed |
| pypi diffoscope(PyPI) | = 46 | No fix listed |
| pypi diffoscope(PyPI) | = 47 | No fix listed |
| pypi diffoscope(PyPI) | = 48 | No fix listed |
| pypi diffoscope(PyPI) | = 49 | No fix listed |
| pypi diffoscope(PyPI) | = 51 | No fix listed |
| pypi diffoscope(PyPI) | = 52 | No fix listed |
| pypi diffoscope(PyPI) | = 54 | No fix listed |
| pypi diffoscope(PyPI) | = 55 | No fix listed |
| pypi diffoscope(PyPI) | = 56 | No fix listed |
| pypi diffoscope(PyPI) | = 59 | No fix listed |
| pypi diffoscope(PyPI) | = 60 | No fix listed |
| pypi diffoscope(PyPI) | = 61 | No fix listed |
| pypi diffoscope(PyPI) | = 62 | No fix listed |
| pypi diffoscope(PyPI) | = 63 | No fix listed |
| pypi diffoscope(PyPI) | = 64 | No fix listed |
| pypi diffoscope(PyPI) | = 65 | No fix listed |
| pypi diffoscope(PyPI) | = 66 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi diffoscope(PyPI) | = 67 | No fix listed |
| pypi diffoscope(PyPI) | = 68 | No fix listed |
| pypi diffoscope(PyPI) | = 69 | No fix listed |
| pypi diffoscope(PyPI) | = 70 | No fix listed |
| pypi diffoscope(PyPI) | = 71 | No fix listed |
| pypi diffoscope(PyPI) | = 72 | No fix listed |
| pypi diffoscope(PyPI) | = 73 | No fix listed |
| pypi diffoscope(PyPI) | = 74 | No fix listed |
| pypi diffoscope(PyPI) | = 75 | No fix listed |
| pypi diffoscope(PyPI) | < 77 | 77 |
| pypi diffoscope(PyPI) | = 76 | No fix listed |
| debian/diffoscope(Debian:12) | < 77 | 77 |
| debian/diffoscope(Debian:13) | < 77 | 77 |
| debian/diffoscope(Debian:14) | < 77 | 77 |
| reproducible builds diffoscope | < 77 | 77 |
| debian linux | = 9.0 | No fix listed |
| debian/diffoscope | = before 77 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- bugs.debian.org exploit issue-tracking patch third-party-advisory
- bugs.debian.org
- github.com vendor-advisory
- github.com product
- github.com
- Debian Security Tracker CVE-2017-0359 issue-tracking third-party-advisory vendor-advisory