U Root

CVEs (3)

CVE	Vendor / Product	Sev	CVSS	EPSS	Published	Description
CVE-2020-7669	U Root U Root	Hig	7.5	0.02	Sep 1, 2020	This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
CVE-2020-7666	U Root U Root	Hig	7.5	0.02	Sep 1, 2020	This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.
CVE-2020-7665	U Root U Root	Hig	7.5	0.02	Sep 1, 2020	This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.

CVE-2020-7669HigSep 1, 2020
U Root
U Root
risk 0.00cvss 7.5epss 0.02
This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
CVE-2020-7666HigSep 1, 2020
U Root
U Root
risk 0.00cvss 7.5epss 0.02
This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.
CVE-2020-7665HigSep 1, 2020
U Root
U Root
risk 0.00cvss 7.5epss 0.02
This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.