Published: 02/08/2016 Updated: 28/11/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Directory traversal vulnerability in KArchive prior to 5.24, as used in KDE Frameworks, allows remote malicious users to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 15.10
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
kde karchives

Debian Bug report logs - #832620 kde4libs: CVE-2016-6232: Extraction of tar files possible to arbitrary system locations Package: src:kde4libs; Maintainer for src:kde4libs is Debian/Kubuntu Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 27 Jul 2016 ...

Andreas Cord-Landwehr discovered that kde4libs, the core libraries for all KDE 4 applications, do not properly handle the extraction of archives with "/" in the file paths A remote attacker can take advantage of this flaw to overwrite files outside of the extraction folder, if a user is tricked into extracting a specially crafted archive For th ...

KDE-Libs could be made to overwrite files ...

KConfig and KDE libraries could be made to crash or run programs if it opened a specially crafted file ...

CWE-22 https://quickgit.kde.org/?p=karchive.git&a=commit&h=0cb243f64eef45565741b27364cece7d5c349c37 http://www.ubuntu.com/usn/USN-3042-1 http://www.openwall.com/lists/oss-security/2016/07/16/2 https://www.kde.org/info/security/advisory-20160724-1.txt http://www.openwall.com/lists/oss-security/2016/07/16/3 http://www.securityfocus.com/bid/91806 http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00023.html http://www.debian.org/security/2016/dsa-3643 https://usn.ubuntu.com/4100-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832620 https://nvd.nist.gov https://usn.ubuntu.com/3042-1/https://www.debian.org/security/./dsa-3643

CVE-2016-6232

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect