MediumCVSS 4.3
EPSS 1.7%
pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Product
debian/pax vulnerabilities
3 published CVES affecting debian/pax, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest debian/pax CVEs
Newest publication first
-
-
MediumCVSS 5.0 EPSS 1.6%
Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.
-
MediumCVSS 5.8 EPSS 3.1%
Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.