CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. See the original NVD description below for full technical details.
CVE
CVE-2017-18196
Severity
LOW
CVSS
3.3
EPSS
0.42%
Original NVD Description
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as demonstrated by /tmp/ANY/PATH/ANY/PATH/input.tif.
Related CVEs
Other vulnerabilities affecting the same vendor(s)