Skip to content
OpenAdvisories

Package · Ubuntu

mono

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.0
    CVE-2021-32841

    Path Traversal in SharpZipLib

    SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is under destination directory. However, it is not enforced that `destDir` ends with slash. If the `de…

    icsharpcode sharpziplib mono SharpZipLib Ubuntu NuGet
  • Medium 4.0
    CVE-2021-32842

    Path Traversal in SharpZipLib

    SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the destination file is under a destination directory. However, it is not enforced that `_baseDirectory` ends with slash. I…

    icsharpcode sharpziplib mono SharpZipLib Ubuntu NuGet
  • Medium 6.5
    CVE-2018-8416

    Tampering vulnerability in .NET Core

    A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

    Microsoft .NET Core Microsoft.NETCore.App mono Ubuntu NuGet
  • Medium 5.5
    CVE-2018-1002208

    Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib

    SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    SharpZipLib SharpZipLib mono mono Debian Ubuntu NuGet