Vulnerability Details CVE-2015-9275
ARC 5.21q allows directory traversal via a full pathname in an archive file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.4%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00048.html
- https://bugs.debian.org/774527
- https://bugzilla.redhat.com/show_bug.cgi?id=1179142
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00048.html
- https://bugs.debian.org/774527
- https://bugzilla.redhat.com/show_bug.cgi?id=1179142
Products affected by CVE-2015-9275
-
cpe:2.3:a:arc_project:arc:5.21q