Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write a log file as root, and follows symlinks there. An unprivileged user can prepare a symlink attack there to create or overwrite files in arbitrary file system locations. The content is not attacker controlled.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
deepin-clone 后置链接漏洞
Vulnerability Description
deepin-clone是一款磁盘和分区备份/恢复工具。 deepin-clone 1.1.3之前版本中存在安全漏洞。攻击者可利用该漏洞在文件系统的任意位置创建或覆盖文件。
CVSS Information
N/A
Vulnerability Type
N/A