PatchTheCVEslrn vulnerabilities and fixes
Recent CVEs affecting slrn, with upgrade or downgrade steps. 2 tracked.
slrn has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2002-08-12. Highest priority: CVE-2002-0740 (score 49/100).
- CVE-2002-0740 HIGH 7.2 DOWNGRADE Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain
- CVE-2001-1035 HIGH 7.5 UPGRADE Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts
FAQ
How do I fix slrn vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is slrn being exploited right now?
None of the tracked slrn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which slrn CVE should I patch first?
CVE-2002-0740 currently ranks highest (49/100): Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain .