Vulnerabilities > CVE-2024-25711

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

reproducible-builds

fedoraproject

NVD

Published: 2024-02-27

Updated: 2025-03-04

Summary

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

Vulnerable Configurations

Part	Description	Count
Application	Reproducible_Builds Reproducible Builds Diffoscope 1 Reproducible Builds Diffoscope 2 Reproducible Builds Diffoscope 3 Reproducible Builds Diffoscope 4 Reproducible Builds Diffoscope 5 Reproducible Builds Diffoscope 6 Reproducible Builds Diffoscope 7 Reproducible Builds Diffoscope 8 Reproducible Builds Diffoscope 9 Reproducible Builds Diffoscope 10 Reproducible Builds Diffoscope 11 Reproducible Builds Diffoscope 12 Reproducible Builds Diffoscope 13 Reproducible Builds Diffoscope 14 Reproducible Builds Diffoscope 15 Reproducible Builds Diffoscope 16 Reproducible Builds Diffoscope 17 Reproducible Builds Diffoscope 18 Reproducible Builds Diffoscope 19 Reproducible Builds Diffoscope 20 Reproducible Builds Diffoscope 21 Reproducible Builds Diffoscope 22 Reproducible Builds Diffoscope 23 Reproducible Builds Diffoscope 24 Reproducible Builds Diffoscope 25 Reproducible Builds Diffoscope 26 Reproducible Builds Diffoscope 27 Reproducible Builds Diffoscope 28 Reproducible Builds Diffoscope 29 Reproducible Builds Diffoscope 30 Reproducible Builds Diffoscope 31 Reproducible Builds Diffoscope 32 Reproducible Builds Diffoscope 33 Reproducible Builds Diffoscope 34 Reproducible Builds Diffoscope 35 Reproducible Builds Diffoscope 36 Reproducible Builds Diffoscope 37 Reproducible Builds Diffoscope 38 Reproducible Builds Diffoscope 39 Reproducible Builds Diffoscope 40 Reproducible Builds Diffoscope 41 Reproducible Builds Diffoscope 42 Reproducible Builds Diffoscope 43 Reproducible Builds Diffoscope 44 Reproducible Builds Diffoscope 45 Reproducible Builds Diffoscope 46 Reproducible Builds Diffoscope 47 Reproducible Builds Diffoscope 48 Reproducible Builds Diffoscope 49 Reproducible Builds Diffoscope 50 Reproducible Builds Diffoscope 51 Reproducible Builds Diffoscope 52 Reproducible Builds Diffoscope 53 Reproducible Builds Diffoscope 54 Reproducible Builds Diffoscope 55 Reproducible Builds Diffoscope 56 Reproducible Builds Diffoscope 57 Reproducible Builds Diffoscope 58 Reproducible Builds Diffoscope 59 Reproducible Builds Diffoscope 60 Reproducible Builds Diffoscope 61 Reproducible Builds Diffoscope 62 Reproducible Builds Diffoscope 63 Reproducible Builds Diffoscope 64 Reproducible Builds Diffoscope 65 Reproducible Builds Diffoscope 66 Reproducible Builds Diffoscope 67 Reproducible Builds Diffoscope 68 Reproducible Builds Diffoscope 69 Reproducible Builds Diffoscope 70 Reproducible Builds Diffoscope 71 Reproducible Builds Diffoscope 72 Reproducible Builds Diffoscope 73 Reproducible Builds Diffoscope 74 Reproducible Builds Diffoscope 75 Reproducible Builds Diffoscope 76 Reproducible Builds Diffoscope 77 Reproducible Builds Diffoscope 78 Reproducible Builds Diffoscope 79 Reproducible Builds Diffoscope 80 Reproducible Builds Diffoscope 81 Reproducible Builds Diffoscope 82 Reproducible Builds Diffoscope 83 Reproducible Builds Diffoscope 84 Reproducible Builds Diffoscope 85 Reproducible Builds Diffoscope 86 Reproducible Builds Diffoscope 87 Reproducible Builds Diffoscope 88 Reproducible Builds Diffoscope 89 Reproducible Builds Diffoscope 90 Reproducible Builds Diffoscope 91 Reproducible Builds Diffoscope 92 Reproducible Builds Diffoscope 93 Reproducible Builds Diffoscope 94 Reproducible Builds Diffoscope 95 Reproducible Builds Diffoscope 96 Reproducible Builds Diffoscope 97 Reproducible Builds Diffoscope 98 Reproducible Builds Diffoscope 99 Reproducible Builds Diffoscope 100 Reproducible Builds Diffoscope 101 Reproducible Builds Diffoscope 102 Reproducible Builds Diffoscope 103 Reproducible Builds Diffoscope 104 Reproducible Builds Diffoscope 105 Reproducible Builds Diffoscope 106 Reproducible Builds Diffoscope 107 Reproducible Builds Diffoscope 108 Reproducible Builds Diffoscope 110 Reproducible Builds Diffoscope 111 Reproducible Builds Diffoscope 112 Reproducible Builds Diffoscope 113 Reproducible Builds Diffoscope 114 Reproducible Builds Diffoscope 115 Reproducible Builds Diffoscope 116 Reproducible Builds Diffoscope 117 Reproducible Builds Diffoscope 118 Reproducible Builds Diffoscope 119 Reproducible Builds Diffoscope 120 Reproducible Builds Diffoscope 121 Reproducible Builds Diffoscope 122 Reproducible Builds Diffoscope 123 Reproducible Builds Diffoscope 124 Reproducible Builds Diffoscope 125 Reproducible Builds Diffoscope 126 Reproducible Builds Diffoscope 127 Reproducible Builds Diffoscope 128 Reproducible Builds Diffoscope 129 Reproducible Builds Diffoscope 130 Reproducible Builds Diffoscope 131 Reproducible Builds Diffoscope 132 Reproducible Builds Diffoscope 133	132
OS	Fedoraproject Fedoraproject Fedora 39	1

Vulnerabilities > CVE-2024-25711 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2024-25711"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2024-25711