Lucene search
Veracode Vulnerability DatabaseVERACODE:29141HistoryJan 26, 2021 - 5:19 a.m.
Zip Slip
2021-01-2605:19:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
zip slip
vulnerability
file writing
oras software
EPSS
0.001
Percentile
35.6%
github.com/deislabs/oras is vulnerable to zip slip. Lack of validation during the extraction of archives or tarballs allows an attacker to write files to arbitrary locations or overwrite arbitrary files via symbolic and hard links in a malicious archive.
Related
prion
prion
Buffer overflow
2021-01-25 19:15:00
redhatcve
redhatcve
CVE-2021-21272
2021-01-27 20:56:41
github
github
Zip slip directory exploit in github.com/deislabs/oras
2022-02-15 00:32:04
osv
osv
CVE-2021-21272
2021-01-25 19:15:12
BIT-oras-2021-21272
2024-03-06 11:00:05
Zip slip directory exploit in github.com/deislabs/oras
2022-02-15 00:32:04
cvelist
cvelist
CVE-2021-21272 zip slip in ORAS
2021-01-25 18:30:15
cve
cve
CVE-2021-21272
2021-01-25 19:15:12
nvd
nvd
CVE-2021-21272
2021-01-25 19:15:12
nessus
nessus
SUSE SLED15 / SLES15 Security Update : helm (SUSE-SU-2022:4606-1)
2022-12-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4606-1)
2022-12-23 00:00:00
redhat
redhat