Known vulnerabilities in squashfs-tools (Debian package) 1:4.2+20121212-3

Vendor: Debian
Version: 1:4.2+20121212-3
Software CPE: cpe:2.3:o:debian:squashfs-tools_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting squashfs-tools (Debian package) version 1:4.2+20121212-3 squashfs-tools (Debian package) 1:4.2+20121212-3 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57416 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-41072
CWE-59 Medium
No
No
1:4.3-12+deb10u2, 1:4.4-2+deb11u2 18.10.2021 SB2021090501
SB2021101901
SB2021091530
and 13 more
#VU56306 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-40153
CWE-22 Medium
No
No
1:4.3-12+deb10u1, 1:4.4-2+deb11u1 05.09.2021 SB2021090501
SB2021090502
SB2021083142
and 15 more