Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-11736

Опубликовано: 13 апр. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 3.3
CVSS3: 3.9

Описание

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

РелизСтатусПримечание
bionic

released

3.28.0-1ubuntu1.2
devel

not-affected

3.36.2-1
eoan

released

3.32.2-1ubuntu0.1
esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

3.28.0-1ubuntu1.2
esm-infra/focal

released

3.36.1-1ubuntu0.1
esm-infra/xenial

released

3.16.5-0ubuntu1.4
focal

released

3.36.1-1ubuntu0.1
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 19%
0.0006
Низкий

3.3 Low

CVSS2

3.9 Low

CVSS3

Связанные уязвимости

CVSS3: 3.9
redhat
почти 6 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

CVSS3: 3.9
nvd
почти 6 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

CVSS3: 3.9
debian
почти 6 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Dir ...

suse-cvrf
больше 5 лет назад

Security update for file-roller

CVSS3: 3.9
github
больше 3 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

EPSS

Процентиль: 19%
0.0006
Низкий

3.3 Low

CVSS2

3.9 Low

CVSS3