Approved changes feed: RSS · Atom

cpe:2.3:a:deepin:deepin_clone:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDeepin (26f6ea36-40df-5075-8a07-f166559a4f15)
ProductDeepin Clone (8e723c6b-578b-50e6-abdc-6f2555daae2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/linuxdeepin/deepin-clone purl2cpe 2026-06-01 10:11:31.958620
pkg:rpm/fedora/deepin-clone purl2cpe 2026-06-01 10:11:31.958623
pkg:rpm/opensuse/deepin-clone purl2cpe 2026-06-01 10:11:31.958625

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13229 vulnerable 2026-06-08 05:12:42.013410 Details available
deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write a log file as root, and follows symlinks there. An unprivileged user can prepare a symlink attack there to create or overwrite files in arbitrary file system locations. The content is not attacker controlled.
Published: 2019-07-04T11:33:16.000Z
Updated: 2024-08-04T23:49:23.963Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.