Known vulnerabilities in squashfs-tools (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:squashfs-tools_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting squashfs-tools (Ubuntu package) squashfs-tools (Ubuntu package) is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57416 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-41072
CWE-59 Medium
No
No
1:4.3-6ubuntu0.18.04.4, 1:4.4-1ubuntu0.2, 1:4.4-1ubuntu0.3, 1:4.4-2ubuntu0.2, 1:4.4-2ubuntu0.3, 1:4.33ubuntu2.16.04.3+esm1 18.10.2021 SB2021090501
SB2021101901
SB2021091530
and 13 more
#VU56306 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-40153
CWE-22 Medium
No
No
1:4.3-6ubuntu0.18.04.3, 1:4.4-1ubuntu0.1, 1:4.4-2ubuntu0.1, 1:4.33ubuntu2.16.04.3+esm1 05.09.2021 SB2021090501
SB2021090502
SB2021083142
and 15 more