PatchTheCVEfile extattr vulnerabilities and fixes
Recent CVEs affecting file extattr, with upgrade or downgrade steps. 1 tracked.
Also searched as: fileextattr.
file extattr has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-01-04. Highest priority: CVE-2006-0077 (score 16/100).
- CVE-2006-0077 LOW 2.1 DOWNGRADE Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer ov
FAQ
How do I fix file extattr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is file extattr being exploited right now?
None of the tracked file extattr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which file extattr CVE should I patch first?
CVE-2006-0077 currently ranks highest (16/100): Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer ov.