CVE-2012-0051: Tahoe-LAFS fails to ensure integrity – CVSS 7.4 · Watchpost

← All vulnerabilities

Tahoe-LAFS fails to ensure integrity

高危 7.4CVE-2012-0051 · GHSA-v62p-cjv8-35xh · PYSEC-2019-253 · Published 07/11/2019 · updated 16/06/2026

要点

CVE-2012-0051 是影响 tahoe-lafs, tahoe-lafs (tahoe-lafs) 的高危 (CVSS 7.4)漏洞。
未来 30 天内被利用的概率（EPSS）：1.7%，高于 77.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
tahoe-lafs PyPI	`= 1.9.0all versions`	No fix yet
tahoe-lafs tahoe-lafs	`= 1.9.0`	No fix yet

Description

Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.

NVD description

Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.

References

nvd.nist.gov/vuln/detail/CVE-2012-0051 · ADVISORY
pypa/advisory-database · WEB
tahoe-lafs/tahoe-lafs · PACKAGE
security-tracker.debian.org/tracker/CVE-2012-0051 · WEB
tahoe-lafs.org/trac/tahoe-lafs/ticket/1654 · WEB
openwall.com/lists/oss-security/2012/01/15/11 · WEB
openwall.com/lists/oss-security/2012/01/26/7 · WEB
openwall.com/lists/oss-security/2012/01/26/8 · WEB
openwall.com/lists/oss-security/2012/01/26/9 · WEB
GitHub Advisory GHSA-v62p-cjv8-35xh · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free