← Back

S3ql

s3ql

Vendor: S3ql Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-12088
1S3ql Project
1S3ql
Nov 21, 2024
Jun 10, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily injec...Show more
S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is related to the checksum_basic_mapping function.Show less
CVE-2014-0485
1S3ql Project
1S3ql
May 6, 2026
Sep 2, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.