PatchTheCVEcanna vulnerabilities and fixes
Recent CVEs affecting canna, with upgrade or downgrade steps. 3 tracked.
canna has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-09-07. Highest priority: CVE-2002-1159 (score 42/100).
- CVE-2022-21950 MEDIUM 5.3 UPGRADE A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openS
- CVE-2002-1159 MEDIUM 6.4 DOWNGRADE Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of
- CVE-2002-1158 HIGH 7.2 UPGRADE Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrar
FAQ
How do I fix canna vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is canna being exploited right now?
None of the tracked canna CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which canna CVE should I patch first?
CVE-2002-1159 currently ranks highest (42/100): Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of .