Описание
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker chosen path.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 5.42.3-1 |
| esm-infra-legacy/trusty | released | 5.18.2-2ubuntu1.7+esm7 |
| esm-infra-legacy/xenial | released | 5.22.1-9ubuntu0.9+esm2 |
| esm-infra/bionic | released | 5.26.1-6ubuntu0.7+esm2 |
| esm-infra/focal | released | 5.30.0-9ubuntu0.5+esm2 |
| jammy | released | 5.34.0-3ubuntu1.7 |
| noble | released | 5.38.2-3.2ubuntu0.3 |
| questing | released | 5.40.1-6ubuntu0.1 |
| resolute | released | 5.40.1-7ubuntu0.1 |
| stonking | not-affected | 5.42.3-1 |
Показывать по
Ссылки на источники
EPSS
9.1 Critical
CVSS3
Связанные уязвимости
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker chosen path.
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker chosen path.
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
Archive::Tar versions before 3.08 for Perl extract symlinks with attac ...
EPSS
9.1 Critical
CVSS3