Описание
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.
A flaw was found in the Python tarfile module. When extracting an archive containing a link on systems that do not support links, the module falls back to extracting the linked member. During this fallback, a security filter designed to prevent the extraction of certain files is not properly applied. This oversight could allow an attacker to bypass intended security restrictions, potentially leading to the creation or modification of arbitrary files on the system.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | hi/python | Not affected | ||
| Red Hat Hardened Images | python3.10 | Affected | ||
| Red Hat Hardened Images | python3.11 | Affected | ||
| Red Hat Hardened Images | python3.12 | Affected | ||
| Red Hat Hardened Images | python3.13 | Affected | ||
| Red Hat Hardened Images | python3.14 | Affected |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
5.7 Medium
CVSS3
Связанные уязвимости
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.
When tarfile extracts a link on a system that doesn't support links, i ...
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.
5.7 Medium
CVSS3