Squashfs-Tools Project Squashfs-Tools
2 CVEs affecting Squashfs-Tools Project Squashfs-Tools. Latest disclosed: 2021-09-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41072 | High | 8.1 | 2021-09-14 | squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that ha… |
CVE-2021-40153 | High | 8.1 | 2021-08-27 | squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file durin… |