Vendors / Deepin Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now Deepin records in CISA KEV No Deepin vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 31
deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporaryMountDevice() function to temporarily mount a file system as root.
CVSS 3.1 HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2019-07-04 · No fix listed CWE-362
Priority LOW 25
In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone.log as root, and follows symlinks there.
CVSS 3.0 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00443 · Published 2019-07-04 · No fix listed CWE-59
Priority LOW 22
deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and follows symlinks there.
CVSS 3.0 MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00386 · Published 2019-07-04 · No fix listed CWE-59
Open these records in search → All records by CVSS severity
2 3 3 0 0
