← All advisories

Critical severity9.8NVD Advisory· Published Feb 19, 2022· Updated Jun 17, 2026

CVE-2016-1239

CVE-2016-1239

Description

duck before 0.10 did not properly handle loading of untrusted code from the current directory.

Affected products

2

Debian/duckcpe-rescue2 versions
< 0.10+ 1 more
- (no CPE)range: < 0.10
- cpe:2.3:a:debian:duck:*:*:*:*:*:*:*:*range: <0.10

Patches

Vulnerability mechanics

References

1

salsa.debian.org/debian/duck/-/commit/b43b5bbf07973c54b8f1c581a941f4facc97177anvdPatchPermissions RequiredVendor Advisory

News mentions

0

No linked articles in our index yet.