PatchTheCVEcatfish vulnerabilities and fixes
Recent CVEs affecting catfish, with upgrade or downgrade steps. 4 tracked.
catfish has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-02-26. Highest priority: CVE-2014-2096 (score 25/100).
- CVE-2014-2096 MEDIUM 4.6 DOWNGRADE Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a
- CVE-2014-2095 MEDIUM 4.6 DOWNGRADE Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is n
- CVE-2014-2094 MEDIUM 4.6 DOWNGRADE Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not
- CVE-2014-2093 MEDIUM 4.6 DOWNGRADE Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Tro
FAQ
How do I fix catfish vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is catfish being exploited right now?
None of the tracked catfish CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which catfish CVE should I patch first?
CVE-2014-2096 currently ranks highest (25/100): Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a.