Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
445
VMScore

CVE-2021-38511

Published: 10/08/2021 Updated: 18/08/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

An issue exists in the tar crate prior to 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

tar project tar

Vendor Advisories

Debian CVElist Bug Report Logs: rust-tar: CVE-2021-38511
Debian Bug report logs - #992173 rust-tar: CVE-2021-38511 Package: src:rust-tar; Maintainer for src:rust-tar is Debian Rust Maintainers <pkg-rust-maintainers@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 14 Aug 2021 20:54:02 UTC Severity: important Tags: security, upstream ...

References

CWE-22https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tar/RUSTSEC-2021-0080.mdhttps://rustsec.org/advisories/RUSTSEC-2021-0080.htmlhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992173https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of serviceCVE-2024-27371CVE-2024-20405CVE-2024-31627CVE-2024-31625race conditionCVE-2024-4358cross-site scriptingCVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook