Lucene search
PRIOn knowledge basePRION:CVE-2019-16680HistorySep 21, 2019 - 9:15 p.m.
Path traversal
2019-09-2121:15:00
PRIOn knowledge base
www.prio-n.com
3
An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./…/ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 18.04 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| file-roller | lt | 3.29.91 | |
| enterprise_linux | eq | 7.0 | |
| enterprise_linux | eq | 8.0 |
References
bugzilla.gnome.org/show_bug.cgi?id=794337
bugzilla.redhat.com/show_bug.cgi?id=1767594
gitlab.gnome.org/GNOME/file-roller/commit/57268e51e59b61c9e3125eb0f65551c7084297e2
gitlab.gnome.org/GNOME/file-roller/commit/e8fb3e24dae711e4fb0d6777e0016cdda8787bc1
lists.debian.org/debian-lts-announce/2019/09/msg00032.html
seclists.org/bugtraq/2019/Sep/57
usn.ubuntu.com/4139-1/
www.debian.org/security/2019/dsa-4537
Related
ubuntucve
ubuntucve
CVE-2019-16680
2019-09-21 00:00:00
osv
osv
CVE-2019-16680
2019-09-21 21:15:10
file-roller - security update
2019-09-28 00:00:00
file-roller - security update
2019-09-28 00:00:00
nvd
nvd
CVE-2019-16680
2019-09-21 21:15:10
debian
debian
[SECURITY] [DSA 4537-1] file-roller security update
2019-09-28 14:09:51
[SECURITY] [DSA 4537-1] file-roller security update
2019-09-28 14:09:51
[SECURITY] [DLA 1938-1] file-roller security update
2019-09-30 07:53:24
openvas
openvas
Debian: Security Advisory (DSA-4537-1)
2019-09-29 00:00:00
Huawei EulerOS: Security Advisory for file-roller (EulerOS-SA-2020-2545)
2020-12-15 00:00:00
Debian: Security Advisory (DLA-1938-1)
2019-10-01 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : File Roller vulnerability (USN-4139-1)
2019-09-26 00:00:00
Debian DLA-1938-1 : file-roller security update
2019-10-01 00:00:00
EulerOS 2.0 SP5 : file-roller (EulerOS-SA-2020-2545)
2020-12-15 00:00:00
ubuntu
ubuntu
File Roller vulnerability
2019-09-25 00:00:00
veracode
veracode
Path Traversal
2020-11-05 03:09:40
cvelist
cvelist
CVE-2019-16680
2019-09-21 20:33:21
debiancve
debiancve
CVE-2019-16680
2019-09-21 21:15:10
redhatcve
redhatcve
CVE-2019-16680
2019-10-31 21:57:20
cve
cve
CVE-2019-16680
2019-09-21 21:15:10
almalinux
almalinux
Moderate: file-roller security update
2020-11-03 12:38:46
rocky
rocky
file-roller security update
2020-11-03 12:38:46
suse
suse
Security update for file-roller (low)
2020-06-18 00:00:00
oraclelinux
oraclelinux
file-roller security update
2020-11-10 00:00:00
redhat
redhat
(RHSA-2020:4820) Moderate: file-roller security update
2020-11-03 12:38:46
rosalinux
rosalinux
Advisory ROSA-SA-2021-1834
2021-07-02 16:40:34