Description
Directory traversal vulnerability in Spiffy before 5.4.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | chicken | 4.10.0-1 | — |
| Debian 13 | chicken | 4.10.0-1 | — |
| Debian 12 | chicken | 4.10.0-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | chicken | No fix yet | — |
References
- 77644 vdb-entry
- [oss-security] 20151118 Re: CVE request for path traversal / info leak bug in Spiffy web server mailing-list
- [chicken-announce] 20151111 Spiffy path traversal vulnerability mailing-list
- http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commit%3Bh=edd4926bb4f4c97760a0e03b0d0e8210398fe967