CVE-2015-1038
Fixed in a distro release EPSS 3%
p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Products: fedoraproject fedora, oracle solaris, 7-zip p7zip
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | p7zip | 9.20.1~dfsg.1-4.2 |
| Debian 13 | p7zip | 9.20.1~dfsg.1-4.2 |
| Debian 6.0 | p7zip | 9.04~dfsg.1-1+deb6u1 |
| Debian 7 | p7zip | 9.20.1~dfsg.1-4+deb7u1 |
| Debian 8 | p7zip | 9.20.1~dfsg.1-4.1+deb8u1 |
| SUSE Linux Enterprise Desktop 12 | p7zip | 9.20.1-3.2 |
| SUSE Linux Enterprise Server 12 | p7zip | 9.20.1-3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 | p7zip | 9.20.1-3.2 |
| Ubuntu 14.04 LTS | p7zip | 9.20.1~dfsg.1-4+deb7u1build0.14.04.1 |
| openSUSE Tumbleweed | p7zip | 16.02-2.1 |