Lucene search

K
osvGoogleOSV:USN-4764-1
HistoryMar 15, 2021 - 5:06 p.m.

glib2.0 vulnerability

2021-03-1517:06:03
Google
osv.dev
6

5.5 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

It was discovered that GLib incorrectly handled certain symlinks when
replacing files. If a user or automated system were tricked into extracting
a specially crafted file with File Roller, a remote attacker could possibly
create files outside of the intended directory.