Lucene search
PRIOn knowledge basePRION:CVE-2020-29050HistoryJan 10, 2022 - 2:10 p.m.
Directory traversal
2022-01-1014:10:00
PRIOn knowledge base
www.prio-n.com
6
SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| sphinx | le | 3.1.1 |
Related
suse
suse
Security update for sphinx (moderate)
2022-03-01 00:00:00
Security update for sphinx (moderate)
2022-02-21 00:00:00
openvas
openvas
openSUSE: Security Advisory for sphinx (openSUSE-SU-2022:0054-1)
2022-03-02 00:00:00
openSUSE: Security Advisory for sphinx (openSUSE-SU-2022:0046-1)
2022-02-22 00:00:00
Fedora Update for sphinx FEDORA-2019-9231a18768
2019-09-15 00:00:00
debiancve
debiancve
CVE-2020-29050
2022-01-10 14:10:16
CVE-2019-14511
2019-08-22 13:15:12
nessus
nessus
Debian DLA-2882-1 : sphinxsearch - LTS security update
2022-01-17 00:00:00
Debian DSA-5036-1 : sphinxsearch - security update
2022-01-07 00:00:00
openSUSE 15 Security Update : sphinx (openSUSE-SU-2022:0054-1)
2022-03-02 00:00:00
alpinelinux
alpinelinux
CVE-2020-29050
2022-01-10 14:10:16
cve
cve
CVE-2020-29050
2022-01-10 14:10:16
CVE-2019-14511
2019-08-22 13:15:12
cvelist
cvelist
CVE-2020-29050
2022-01-07 06:02:39
CVE-2019-14511
2019-08-22 12:26:41
nvd
nvd
CVE-2020-29050
2022-01-10 14:10:16
CVE-2019-14511
2019-08-22 13:15:12
ubuntucve
ubuntucve
CVE-2020-29050
2022-01-10 00:00:00
CVE-2019-14511
2019-08-22 00:00:00
prion
prion
Authentication flaw
2019-08-22 13:15:00
fedora
fedora
[SECURITY] Fedora 30 Update: sphinx-2.2.11-12.fc30
2019-09-14 01:13:34
[SECURITY] Fedora 29 Update: sphinx-2.2.11-12.fc29
2019-09-14 01:54:57
[SECURITY] Fedora 31 Update: sphinx-2.2.11-13.fc31
2019-09-30 00:03:10
mageia
mageia
Updated sphinx packages fix security vulnerability
2020-02-18 17:05:53
Updated sphinx packages fix security vulnerability
2022-03-23 11:36:28
veracode
veracode
Information Disclosure
2021-12-14 15:58:38
Arbitrary File Read
2021-12-10 16:55:35
debian
debian
[SECURITY] [DSA 5036-1] sphinxsearch security update
2022-01-06 18:36:00
[SECURITY] [DLA 2882-1] sphinxsearch security update
2022-01-16 23:36:28
redos
redos
ROS-20240626-12
2024-06-26 00:00:00
osv
osv
sphinxsearch - security update
2022-01-06 00:00:00
sphinxsearch - security update
2022-01-17 00:00:00