Tukaani vulnerabilities
We track 2 vulnerabilities in Tukaani products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 29, 2024.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest Tukaani vulnerabilities
- 10.0 Critical severity
Red Hat Enterprise Linux 10: Embedded Malicious Code
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then
- 8.8 High severity
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw