Critical severity9.3NVD Advisory· Published Dec 27, 2023· Updated Jun 17, 2026

CVE-2023-50255

Description

Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version 5.12.21 which addresses the issue. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linuxdeepin/deepin-compressor2 versions
cpe:2.3:a:deepin:deepin-compressor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:deepin:deepin-compressor:*:*:*:*:*:*:*:*range: <5.12.21
- (no CPE)range: <5.12.21
Linuxdeepin/Deepin Linux OSllm-create
Range: <5.12.21
osv-coords5 versions
pkg:rpm/opensuse/deepin-compressor&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/deepin-compressor&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/deepin-compressor&distro=openSUSE%20Tumbleweed pkg:rpm/suse/deepin-compressor&distro=SUSE%20Package%20Hub%2015%20SP4 pkg:rpm/suse/deepin-compressor&distro=SUSE%20Package%20Hub%2015%20SP5
< 5.12.2-bp154.2.3.1+ 4 more
- (no CPE)range: < 5.12.2-bp154.2.3.1
- (no CPE)range: < 5.12.13-bp155.2.3.1
- (no CPE)range: < 5.12.13-2.1
- (no CPE)range: < 5.12.2-bp154.2.3.1
- (no CPE)range: < 5.12.13-bp155.2.3.1
Linuxdeepin/Developer Centercpe-rescue
Range: < 5.12.21

Patches

Vulnerability mechanics

References

github.com/linuxdeepin/deepin-compressor/commit/82f668c78c133873f5094cfab6e4eabc0b70e4b6nvdPatch
github.com/linuxdeepin/developer-center/security/advisories/GHSA-rw5r-8p9h-3gp2nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.605
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000