Published: 07/04/2021 Updated: 07/11/2023

CVSS v2 Base Score: 2.6 | Impact Score: 4.9 | Exploitability Score: 1.9

CVSS v3 Base Score: 3.9 | Impact Score: 2.5 | Exploitability Score: 1.3

VMScore: 231

Vector: AV:L/AC:H/Au:N/C:N/I:P/A:P

fr-archive-libarchive.c in GNOME file-roller up to and including 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome file-roller
fedoraproject fedora 34

fr-archive-libarchivec in GNOME file-roller through 3380, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations NOTE: this issue exists because of an incomplete fix for CVE-2020-11736 ...

CWE-59 https://gitlab.gnome.org/GNOME/file-roller/-/issues/108 https://gitlab.gnome.org/GNOME/file-roller/-/commit/e970f4966bf388f6e7c277357c8b186c645683ae https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KJBZVCHQ4SSX2JAJZVJ5J4P3GEMXJ75/https://nvd.nist.gov https://security.archlinux.org/CVE-2020-36314

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-36314

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect