tocsin

Debian/busybox: high 7.5

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

Action: Upgrade busybox to 1:1.27.2-1 or later.

Affected

introducedfixedlast affected
01:1.27.2-1-

Fixed versions

1:1.27.2-1

Sources

published · modified · JSON