Lucene search
Alpine Linux Development TeamALPINE:CVE-2020-28949HistoryNov 19, 2020 - 7:15 p.m.
CVE-2020-28949
2020-11-1919:15:11
Alpine Linux Development Team
security.alpinelinux.org
37
archive_tar
filename sanitization
vulnerability
unix
stream-wrapper attack
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8
Confidence
High
EPSS
0.944
Percentile
99.3%
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.11-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.12-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.13-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.14-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | drupal7 | < 7.75-r0 | UNKNOWN |
Related
redhatcve
redhatcve
CVE-2020-28949
2020-12-23 13:31:50
debiancve
debiancve
CVE-2020-28949
2020-11-19 19:15:11
osv
osv
CVE-2020-28949
2020-11-19 19:15:11
Multiple vulnerabilities through filename manipulation in Archive_Tar
2021-04-22 16:20:59
BIT-drupal-2020-28949
2024-03-06 10:56:00
cvelist
cvelist
CVE-2020-28949
2020-11-19 18:14:18
nvd
nvd
CVE-2020-28949
2020-11-19 19:15:11
veracode
veracode
PHAR Unserialization
2020-11-20 03:05:45
prion
prion
Code injection
2020-11-19 19:15:00
nessus
nessus
EulerOS 2.0 SP3 : php-pear (EulerOS-SA-2021-1111)
2021-01-20 00:00:00
EulerOS 2.0 SP2 : php-pear (EulerOS-SA-2021-1345)
2021-02-22 00:00:00
Debian DLA-2465-1 : php-pear security update
2020-11-24 00:00:00
packetstorm
packetstorm
PEAR Archive_Tar Arbitrary File Write
2021-01-25 00:00:00
cisa_kev
cisa_kev
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
2022-08-25 00:00:00
github
github
Multiple vulnerabilities through filename manipulation in Archive_Tar
2021-04-22 16:20:59
Drupal core Arbitrary PHP code execution
2024-05-15 20:50:24
Drupal core Arbitrary PHP code execution
2024-05-15 21:02:35
openvas
openvas
Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2021-1111)
2021-01-19 00:00:00
Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2021-1345)
2021-02-22 00:00:00
Debian: Security Advisory (DLA-2466-1)
2020-11-28 00:00:00
friendsofphp
friendsofphp
Potential file overwrite if archive filename starts with file://
2020-11-20 00:00:00
cve
cve
CVE-2020-28949
2020-11-19 19:15:11
metasploit
metasploit
PEAR Archive_Tar 1.4.10 Arbitrary File Write
2021-01-15 22:20:06
mageia
mageia
Updated php-pear packages fix security vulnerabilities
2020-12-08 13:40:32
fedora
fedora
[SECURITY] Fedora 33 Update: php-pear-1.10.12-4.fc33
2020-12-02 10:40:12
[SECURITY] Fedora 32 Update: php-pear-1.10.12-4.fc32
2020-12-02 10:40:00
[SECURITY] Fedora 34 Update: drupal7-7.82-1.fc34
2021-09-19 04:48:53
amazon
amazon
Medium: php-pear
2021-01-05 23:34:00
Medium: php7-pear
2021-01-12 22:51:00
ubuntucve
ubuntucve
CVE-2020-28949
2020-11-19 00:00:00
f5
f5
K58581302 : Archive_Tar vulnerabilities CVE-2020-28948 and CVE-2020-28949
2020-12-03 00:00:00
debian
debian
[SECURITY] [DSA 4817-1] php-pear security update
2020-12-19 09:59:46
[SECURITY] [DLA 2465-1] php-pear security update
2020-11-23 11:15:52
[SECURITY] [DLA 2466-1] drupal7 security update
2020-11-27 09:58:18
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Php Archive Tar
2020-11-27 11:21:46
Exploit for Deserialization of Untrusted Data in Php Archive Tar
2021-05-24 15:36:16
ubuntu
ubuntu
PEAR vulnerabilities
2020-12-01 00:00:00
Drupal vulnerabilities
2024-08-27 00:00:00
Drupal vulnerabilities
2024-09-03 00:00:00
drupal
drupal
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2020-013
2020-11-25 00:00:00
attackerkb
attackerkb
CVE-2020-28949
2020-11-19 00:00:00
redhat
redhat
(RHSA-2022:6542) Moderate: php:7.4 security update
2022-09-15 08:06:55
(RHSA-2022:6541) Moderate: php:7.4 security update
2022-09-15 08:06:49
(RHSA-2022:7340) Moderate: php-pear security update
2022-11-02 16:04:25
rocky
rocky
php:7.4 security update
2022-09-15 08:06:55
oraclelinux
oraclelinux
php:7.4 security update
2022-09-16 00:00:00
php-pear security update
2022-11-03 00:00:00
gentoo
gentoo
PEAR Archive_Tar: Directory traversal
2021-01-26 00:00:00
almalinux
almalinux
Moderate: php:7.4 security update
2022-09-15 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-01-29 21:09:49
thn
thn
CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
2022-08-29 04:23:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8
Confidence
High
EPSS
0.944
Percentile
99.3%
Related for ALPINE:CVE-2020-28949