Lucene search
Redhat.comRH:CVE-2020-24654HistorySep 18, 2020 - 11:00 a.m.
CVE-2020-24654
2020-09-1811:00:38
redhat.com
access.redhat.com
17
kde ark
tar archive
symlinks
EPSS
0.003
Percentile
68.5%
In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user’s home directory.
Mitigation
The way to mitigate this flaw is to pay attention to the contents of the archive in ark before extracting, to ensure that there are no improper symlinks, and heed the file overwrite warnings.
Related
nessus
nessus
GLSA-202010-06 : Ark: Arbitrary code execution
2020-10-21 00:00:00
RHEL 7 : ark (Unpatched Vulnerability)
2024-05-11 00:00:00
Fedora 32 : ark (2020-c2f8a1e8a5)
2020-09-08 00:00:00
openvas
openvas
Fedora: Security Advisory for ark (FEDORA-2020-c2f8a1e8a5)
2020-09-08 00:00:00
openSUSE: Security Advisory for ark (openSUSE-SU-2020:1310-1)
2020-09-02 00:00:00
Mageia: Security Advisory (MGASA-2020-0353)
2022-01-28 00:00:00
debian
debian
[SECURITY] [DSA 4759-1] ark security update
2020-09-04 19:14:20
[SECURITY] [DSA 4759-1] ark security update
2020-09-04 19:14:20
[SECURITY] [DLA 3015-1] ark security update
2022-05-20 12:06:00
osv
osv
CVE-2020-24654
2020-09-02 17:15:12
ark - security update
2020-09-04 00:00:00
ark - security update
2022-05-20 00:00:00
debiancve
debiancve
CVE-2020-24654
2020-09-02 17:15:12
suse
suse
Security update for ark (moderate)
2020-09-01 00:00:00
Security update for ark (moderate)
2020-09-18 00:00:00
veracode
veracode
Symlink Attack
2020-08-31 04:06:10
fedora
fedora
[SECURITY] Fedora 32 Update: ark-20.04.3-5.fc32
2020-09-07 17:14:55
[SECURITY] Fedora 33 Update: ark-20.04.3-5.fc33
2020-09-25 17:10:05
prion
prion
Directory traversal
2020-09-02 17:15:00
gentoo
gentoo
Ark: Arbitrary code execution
2020-10-20 00:00:00
Ark: Symlink vulnerability
2021-01-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-24654
2020-09-01 00:00:00
mageia
mageia
Updated ark packages fix security vulnerability
2020-08-29 09:40:50
archlinux
archlinux
[ASA-202009-2] ark: arbitrary filesystem access
2020-09-03 00:00:00
alpinelinux
alpinelinux
CVE-2020-24654
2020-09-02 17:15:12
freebsd
freebsd
ark -- extraction outside of extraction directory
2020-08-27 00:00:00
cve
cve
CVE-2020-24654
2020-09-02 17:15:12
nvd
nvd
CVE-2020-24654
2020-09-02 17:15:12
ubuntu
ubuntu
Ark vulnerability
2020-09-01 00:00:00
cvelist
cvelist
CVE-2020-24654
2020-09-02 16:22:10