CVE-2017-1000026

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using…

published July 13, 2017

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01900 · 79.5th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using…
    cvelistv5