CVE-2023-28371

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-28371
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28371.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-28371
Related
Published
2023-03-15T04:15:11Z
Modified
2024-11-20T11:12:14.732306Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.

References

Affected packages

Debian:11 / stellarium

Package

Name
stellarium
Purl
pkg:deb/debian/stellarium?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.20.4-3
0.22.1-1
0.22.2-1

23.*

23.3-1
23.4-1
23.4-2

24.*

24.1-1
24.2-1
24.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / stellarium

Package

Name
stellarium
Purl
pkg:deb/debian/stellarium?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.22.2-1

23.*

23.3-1
23.4-1
23.4-2

24.*

24.1-1
24.2-1
24.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / stellarium

Package

Name
stellarium
Purl
pkg:deb/debian/stellarium?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
23.3-1

Affected versions

0.*

0.22.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/stellarium/stellarium

Affected ranges

Type
GIT
Repo
https://github.com/stellarium/stellarium
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1261f74dc4aa6bbd01ab514343424097f8cf46b7
Fixed
787a894897b7872ae96e6f5804a182210edd5c78
Fixed
eba61df3b38605befcb43687a4c0a159dbc0c5cb

Affected versions

Other

stellarium-0-10-5
stellarium-0-10-6
stellarium-0-11-0
stellarium-0-11-1
stellarium-0-11-2
stellarium-0-11-3
stellarium-0-11-4
stellarium-0-12-0
stellarium-0-12-1
stellarium-0-12-2

v0.*

v0.13.0
v0.13.1
v0.13.2
v0.13.3
v0.14.0
v0.15.1
v0.15.2
v0.17.0
v0.18.0
v0.18.1
v0.18.2
v0.18.3
v0.19.0
v0.19.1
v0.19.2
v0.19.3
v0.20.0
v0.20.1
v0.20.2
v0.20.3
v0.20.4
v0.21.0
v0.21.1
v0.21.2
v0.21.3
v0.22.0
v0.22.1
v0.22.2

v1.*

v1.0
v1.1
v1.2