USN-8958-1: .NET vulnerabilities
USN-8958-1
Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded rule archives. An attacker could possibly use this issue to write arbitrary files outside the configured rules directory.
A separate affected-products list was not included in the collected bulletin.
Separate remediation guidance was not included in the collected bulletin.
No CVE identifiers were listed in the collected bulletin.
The publication date reported by the vendor.
We collected the advisory from the official source.
Our collector saw this advisory during a later source check.