VDB
BDU%3A2020-01847
BDU%3A2020-01847
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции fstream.DirWriter() пакета fstream, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю перезаписать файлы в системе
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Novell Inc., Node.js Foundation | Ubuntu, SUSE Enterprise Storage, SUSE OpenStack Cloud, SUSE Linux Enterprise Module for Web Scripting, OpenSUSE Leap, Suse Linux Enterprise Server, SUSE Linux Enterprise Server for SAP Applications, fstream |
Timeline
- Apr 29, 2020 CVE Published
References
- https://www.suse.com/security/cve/CVE-2019-13173/ url
- https://nvd.nist.gov/vuln/detail/CVE-2019-13173 url
- https://usn.ubuntu.com/4123-1/ url
- https://github.com/npm/fstream/commit/6a77d2fa6e1462693cf8e46f930da96ec1b0bb22 url
- https://www.npmjs.com/advisories/886 url
- https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00010.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00052.html url