Summary
Richard Weinberger discovered that Squashfs-Tools mishandled certain
malformed SQUASHFS files. An attacker could use this vulnerability to
write arbitrary files to the filesystem.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | squashfs-tools | 1:4.3-6ubuntu0.18.04.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | squashfs-tools | 1:4.4-1ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2…
References
-
report
https://ubuntu.com/security/CVE-2021-41072