CVE-2021-40153
squashfs-tools - security update
8.1
HIGH
CVSS 3.1
EPSS 0.54%
Description
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations outside of the destination.
How to fix CVE-2021-40153
To remediate CVE-2021-40153, upgrade the affected package to a fixed version below.
- —upgrade to 4.5-r0 or later
- —upgrade to 1:4.4-2+deb11u1 or later
- —upgrade to 1:4.3-3+deb9u2 or later
- —upgrade to 1:4.3-12+deb10u1 or later
Is CVE-2021-40153 being exploited?
Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.
Affected packages (4)
- from 0, < 4.5-r0
- from 0, < 1:4.4-2+deb11u1
- from 0, < 1:4.3-3+deb9u2
- from 0, < 1:4.3-12+deb10u1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H |