Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -1 articles for you...
197
security advisoryupdateremote code executionDebian 11: binwalk Critical Path Traversal RCE DLA-4410-1 CVE-2022-4510
A path traversal vulnerability was identified in binwalk. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a. Debian LTS Advisory DLA-4410-1
Dec 16, 2025
•Critical
Debian LTS
91
security advisorygentoosoftware updateGentoo: GLSA 202309-07 Normal Severity: Binwalk Remote Code Execution
Multiple vulnerabilities have been discovered in Binwalk, the worst of which could result in remote code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202309-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Binwalk: Multiple Vulnerabilities Date: September 17, 2023 Bugs: #820614, #903652 ID: 202309-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in Binwalk, the worst of which could result in remote code execution. Background ========== Binwalk is a tool for identifying files embedded inside firmware images. Affected packages ================= Package Vulnerable Unaffected ---------------- ------------ ------------ app-misc/binwalk < 2.3.4 > = 2.3.4 Description =========== Multiple vulnerabilities have been discovered in Binwalk. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Binwalk users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-misc/binwalk-2.3.4" References ========== [ 1 ] CVE-2022-4510 https://nvd.nist.gov/vuln/detail/CVE-2022-4510 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202309-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Sep 17, 2023
Gentoo
203
security advisorymoderateremote code executionMageia 8: MGASA-2023-0074 Moderate: Binwalk Remote Code Execution
Remote code execution using crafted PFS filesystem. (CVE-2022-4510) References: - https://bugs.mageia.org/show_bug.cgi?id=31375 - https://lists.fedoraproject.org/archives/list/
Mar 01, 2023
Mageia
197
security advisorycode executiondebianDebian 10: DLA-3339-1 Critical: Binwalk Code Execution Issue
Code execution through crafted PFS filesystems was fixed in binwalk, a tool and Python module for analyzing binary blobs and executable code. For Debian 10 buster, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3339-1
Feb 23, 2023
•Critical
Debian LTS
89
security advisorymoderatefedoraUbuntu 22.04: 2023-24058a6c8f Critical: CUPS Remote Code Execution Patch
Security fix for CVE-2022-4510. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-23047a5f4f 2023-02-05 01:52:43.638628 --------------------------------------------------------------------------------Name : binwalk Product : Fedora 36 Version : 2.3.3 Release : 3.fc36 URL : https://github.com/ReFirmLabs/binwalk Summary : Firmware analysis tool Description : Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file utility. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-4510 --------------------------------------------------------------------------------ChangeLog: * Fri Jan 27 2023 Scott Talbert - 2.3.3-3 - Fix path traversal in PFS extractor script (#2165006) * Wed Jan 18 2023 Fedora Release Engineering - 2.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #2165005 - CVE-2022-4510 binwalk: path traversal in PFS extractor script https://bugzilla.redhat.com/show_bug.cgi?id=2165005 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-23047a5f4f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 05, 2023
•Critical
Fedora
89
security advisoryFedorasecurity fixFedora 37: 32eb9d8ee7 Critical Path Traversal Fix for Binwalk
Security fix for CVE-2022-4510. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-32eb9d8ee7 2023-02-05 01:46:08.509414 --------------------------------------------------------------------------------Name : binwalk Product : Fedora 37 Version : 2.3.3 Release : 3.fc37 URL : https://github.com/ReFirmLabs/binwalk Summary : Firmware analysis tool Description : Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file utility. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-4510 --------------------------------------------------------------------------------ChangeLog: * Fri Jan 27 2023 Scott Talbert - 2.3.3-3 - Fix path traversal in PFS extractor script (#2165006) * Wed Jan 18 2023 Fedora Release Engineering - 2.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #2165005 - CVE-2022-4510 binwalk: path traversal in PFS extractor script https://bugzilla.redhat.com/show_bug.cgi?id=2165005 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-32eb9d8ee7' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 05, 2023
•Critical
Fedora
89
security advisoryFedoradirectory traversalFedora 36: FEDORA-2022-3727f00e4b Critical: binwalk Symlink Traversal
Security fix for CVE-2021-4287. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-3727f00e4b 2023-01-05 01:20:43.490546 --------------------------------------------------------------------------------Name : binwalk Product : Fedora 36 Version : 2.3.3 Release : 1.fc36 URL : https://github.com/ReFirmLabs/binwalk Summary : Firmware analysis tool Description : Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file utility. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2021-4287 --------------------------------------------------------------------------------ChangeLog: * Tue Dec 27 2022 Scott Talbert - 2.3.3-1 - Update to new upstream release 2.3.3 (#2003337 #2156566) * Wed Jul 20 2022 Fedora Release Engineering - 2.3.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 Python Maint - 2.3.2-3 - Rebuilt for Python 3.11 --------------------------------------------------------------------------------References: [ 1 ] Bug #2156565 - CVE-2021-4287 binwalk: symlink directory traversal vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=2156565 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-3727f00e4b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 05, 2023
•Critical
Fedora
89
security advisoryFedoradirectory traversalFedora 37: FEDORA-2022-a36ba48049 Moderate: Binwalk Symlink Issue
Security fix for CVE-2021-4287. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-a36ba48049 2023-01-05 01:16:36.900007 --------------------------------------------------------------------------------Name : binwalk Product : Fedora 37 Version : 2.3.3 Release : 1.fc37 URL : https://github.com/ReFirmLabs/binwalk Summary : Firmware analysis tool Description : Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file utility. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2021-4287 --------------------------------------------------------------------------------ChangeLog: * Tue Dec 27 2022 Scott Talbert - 2.3.3-1 - Update to new upstream release 2.3.3 (#2003337 #2156566) --------------------------------------------------------------------------------References: [ 1 ] Bug #2156565 - CVE-2021-4287 binwalk: symlink directory traversal vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=2156565 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-a36ba48049' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 05, 2023
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!