Vulnerabilities

TI-2019-09914 CVE-2019-13228 · GHSA-4q9c-fvpx-pq67

deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix()…

LOW 22

deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and follows symlinks there.

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00386 Published 2019-07-04 No fix listed CWE-59

TI-2019-09913 CVE-2019-13227 · GHSA-v3m5-rr4q-j6rp

In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path…

LOW 25

In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone.log as root, and follows symlinks there.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00443 Published 2019-07-04 No fix listed CWE-59

TI-2019-09912 CVE-2019-13226 · GHSA-7wr8-6fw9-mw29

deepin-clone before 1.1.3 uses a predictable path…

LOW 31

deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporaryMountDevice() function to temporarily mount a file system as root.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00278 Published 2019-07-04 No fix listed CWE-362

Vulnerabilities

Filters

deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix()…

In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path…

deepin-clone before 1.1.3 uses a predictable path…