PatchTheCVEattic vulnerabilities and fixes
Recent CVEs affecting attic, with upgrade or downgrade steps. 1 tracked.
attic has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-08-18. Highest priority: CVE-2015-4082 (score 49/100).
- CVE-2015-4082 MEDIUM 6.5 UPGRADE attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read
FAQ
How do I fix attic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is attic being exploited right now?
None of the tracked attic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which attic CVE should I patch first?
CVE-2015-4082 currently ranks highest (49/100): attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read .