logo

Database

Lack of data validation - Path Traversal In diffoscope

Description

arbitrary file overwrite

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2017-03592. NVD-2017-03593. OSV-DEBIAN-2017-03594. OSV-2017-03595. GHSA-8p5c-f328-9fvv6. GCVE-2017-03597. SECURITY-TRACKER-CVE-2017-0359

References

1. https://github.com/anthraxx/diffoscope/commit/632a40828a54b399787c25e7fa243f732aef7e052. https://github.com/anthraxx/diffoscope/commit/f379d1f611dbd5d361e12b732e07c8aee45ff2263. https://bugs.debian.org/8547234. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=8547235. https://github.com/pypa/advisory-database/tree/main/vulns/diffoscope/PYSEC-2018-83.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.