Vendors / Squashfs-tools Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Squashfs-tools Project records in CISA KEV No Squashfs-tools Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.02296 · Published 2021-09-14 · Partial fix CWE-22
Priority MEDIUM 40
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.025 · Published 2021-08-27 · Partial fix CWE-22
Open these records in search → All records by CVSS severity
0 2 0 0 0
