CVE-2017-18196

Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow…

published February 23, 2018

CVSS
—
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as demonstrated by /tmp/ANY/PATH/ANY/PATH/input.tif.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00416 · 34.6th percentile
Published
2018-02-23T21:00Z
EPSS history
Timeline
  • 23 FEB 21:00Z
    Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow…
    cvelistv5