Nixpkgs security tracker
7.5 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
libks has path traversal in kws HTTP parser via URI segment overflow
libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP request parser fails to reject URIs whose path has more segments than its internal canonicalization buffer can hold. The canonicalization step silently passes such URIs through with embedded ".." sequences intact, enabling path traversal in any consumer that later joins the URI with a filesystem path. Version 2.0.11 patches the issue.
References
-
https://github.com/signalwire/libks/security/advisories/GHSA-684h-wjm9-2p6j x_refsource_CONFIRM
Affected products
- ==< 2.0.11
Matching in nixpkgs
pkgs.libks
Foundational support for signalwire C products
pkgs.libksi
Keyless Signature Infrastructure API library
pkgs.libksba
CMS and X.509 access library
pkgs.kdePackages.libksane
Library providing QWidget with all the logic to interface scanners
pkgs.kdePackages.libksieve
Library which manages Sieve support
pkgs.kdePackages.libkscreen
KDE's screen management software
pkgs.kdePackages.libksysguard
Library to retrieve information on the current status of computer hardware
Package maintainers
-
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
-
@bkchr Bastian Köcher <nixos@kchr.de>
-
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
-
@mjm Matt Moriarity <matt@mattmoriarity.com>
-
@peterhoeg Peter Hoeg <peter@hoeg.com>
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
-
@NickCao Nick Cao <nickcao@nichi.co>
-
@nyanloutre Paul Trehiou <paul@nyanlout.re>
-
@K900 Ilya K. <me@0upti.me>
-
@FRidh Frederik Rietdijk <fridh@fridh.nl>
-
@phanirithvij Phani Rithvij <phanirithvij2000@gmail.com>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@eljamm Fedi Jamoussi <fedi.jamoussi@protonmail.ch>
-
@misuzu misuzu <bakalolka@gmail.com>