CVE-2015-1191

NONE EPSS 85.8%
Published Jan 21, 201511y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jan 21, 2015 11y ago
Last Modified Jun 17, 2026 2w ago

Description

Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.

Threat Intelligence

EPSS Exploit Probability
85.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 1

VendorProductVersionRange
zlibpigz2.3.1any

References 6

  • lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2016-03/msg00013.html
  • lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2016-03/msg00017.html
  • openwall.com http://www.openwall.com/lists/oss-security/2015/01/18/3
  • securityfocus.com http://www.securityfocus.com/bid/72109
  • bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774978
    Exploit
  • github.com https://github.com/madler/pigz/commit/fdad1406b3ec809f4954ff7cdf9e99eb18c2458f

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.