https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:40:15 +0000 https://db.gcve.eu/vuln/cve-2014-9447 <p>Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.</p> <p>Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.</p> https://db.gcve.eu/vuln/cve-2014-9447 https://db.gcve.eu/vuln/usn-2482-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: elfutils</p> <p>Alexander Cherepanov discovered that libelf1 incorrectly handled certain filesystem paths while extracting ar archives. An attacker could use this flaw to perform a directory traversal attack on the root directory if the process extracting the ar archive has write access to the root directory.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: elfutils</p> <p>Alexander Cherepanov discovered that libelf1 incorrectly handled certain filesystem paths while extracting ar archives. An attacker could use this flaw to perform a directory traversal attack on the root directory if the process extracting the ar archive has write access to the root directory.</p> https://db.gcve.eu/vuln/usn-2482-1