Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 50

Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05204 Published 2017-08-17 Partial fix CWE-122
Priority LOW 21

The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files a…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00368 Published 2014-01-23 Fixed CWE-264