CVE-2015-1191: Path Traversal
Published Jan 9, 2015
·Updated
Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.
Affected Software
2 affected componentsFixes available
debian/pigz
2.6-12.8-1
zlib Pigz=2.3.1
Event History
Jan 9, 2015
Data Sourced
via Debian·04:42 PM
SeverityAffected Software
Jan 21, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Aug 6, 2024
Data Sourced
via Debian·04:44 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1191?
CVE-2015-1191 is considered a high severity vulnerability due to potential unauthorized file access.
2
How do I fix CVE-2015-1191?
To fix CVE-2015-1191, update the pigz package to version 2.6-1 or later.
3
What kind of attack can exploit CVE-2015-1191?
CVE-2015-1191 can be exploited by remote attackers to perform directory traversal attacks.
4
Which versions of pigz are affected by CVE-2015-1191?
CVE-2015-1191 affects pigz version 2.3.1 and potentially earlier versions.
5
Is there a permanent solution for CVE-2015-1191?
The permanent solution for CVE-2015-1191 is to apply the latest security patches provided for pigz.