Debian Fsp vulnerabilities

2 CVEs affecting Debian Fsp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0011, published 2004-01-20.

More from Debian.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0011, published 2004-01-20. High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days. Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.
• CVE-2003-1022, published 2004-01-20. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.