CVE-2021-29136

Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci…

published April 6, 2021

CVSS
—
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.7th percentile
Published
2021-04-06T15:57Z
EPSS history
Timeline
  • 06 APR 15:57Z
    Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci…
    cvelistv5