CVE-2017-0359

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@debian.org

Published

2018-04-13

Last modified

2024-09-16

Affected products

• Debian Linux (Debian)
• Diffoscope (Debian)
• Diffoscope (Reproducible Builds)

References

• https://bugs.debian.org/854723
• https://security-tracker.debian.org/tracker/CVE-2017-0359