Lucene search
Veracode Vulnerability DatabaseVERACODE:30113HistoryApr 22, 2021 - 6:29 a.m.
Directory Traversal
2021-04-2206:29:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
21.9%
gnome-autoar is vulnerable to information disclosure. The autoar-extractor.c module allows an attacker to exploit a directory traversal vulnerability during extraction as it lacks symlink validation, resulting in writing of files in arbitrary system directories.
References
bugzilla.redhat.com/show_bug.cgi?id=1925640
gitlab.gnome.org/GNOME/gnome-autoar/-/commit/adb067e645732fdbe7103516e506d09eb6a54429
gitlab.gnome.org/GNOME/gnome-autoar/-/issues/7
lists.fedoraproject.org/archives/list/[email protected]/message/BN5TVQ7OHZEGY6AGFLAZWCVCI53RYNHQ/
secdb.alpinelinux.org/v3.13/community.yaml
security.gentoo.org/glsa/202105-10
Related
debiancve
debiancve
CVE-2020-36241
2021-02-05 14:15:17
CVE-2021-28650
2021-03-17 06:15:14
cvelist
cvelist
CVE-2020-36241
2021-02-05 07:11:07
CVE-2021-28650
2021-03-17 05:51:33
openvas
openvas
Ubuntu: Security Advisory (USN-4733-1)
2021-02-12 00:00:00
openSUSE: Security Advisory for gnome-autoar (openSUSE-SU-2021:0390-1)
2021-04-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0687-1)
2021-06-09 00:00:00
redhatcve
redhatcve
CVE-2020-36241
2021-02-05 19:21:53
CVE-2021-28650
2021-03-17 13:46:38
prion
prion
Directory traversal
2021-02-05 14:15:00
Directory traversal
2021-03-17 06:15:00
cve
cve
CVE-2020-36241
2021-02-05 14:15:17
CVE-2021-28650
2021-03-17 06:15:14
alpinelinux
alpinelinux
CVE-2020-36241
2021-02-05 14:15:17
CVE-2021-28650
2021-03-17 06:15:14
nessus
nessus
openSUSE Security Update : gnome-autoar (openSUSE-2021-390)
2021-03-08 00:00:00
SUSE SLED15 / SLES15 Security Update : gnome-autoar (SUSE-SU-2021:0687-1)
2021-03-03 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : GNOME Autoar vulnerability (USN-4733-1)
2021-02-11 00:00:00
mageia
mageia
Updated gnome-autoar packages fix security vulnerability
2021-03-04 19:53:32
suse
suse
Security update for gnome-autoar (moderate)
2021-03-06 00:00:00
osv
osv
CVE-2020-36241
2021-02-05 14:15:17
gnome-autoar vulnerability
2021-02-11 12:46:24
CVE-2021-28650
2021-03-17 06:15:14
ubuntucve
ubuntucve
CVE-2020-36241
2021-02-05 00:00:00
CVE-2021-28650
2021-03-17 00:00:00
nvd
nvd
CVE-2020-36241
2021-02-05 14:15:17
CVE-2021-28650
2021-03-17 06:15:14
ubuntu
ubuntu
GNOME Autoar vulnerability
2021-02-11 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: dconf-0.40.0-1.fc34
2021-03-20 00:21:33
[SECURITY] Fedora 34 Update: glib2-2.67.6-2.fc34
2021-03-20 00:21:34
[SECURITY] Fedora 34 Update: gnome-calendar-40~rc-1.fc34
2021-03-20 00:21:35
gentoo
gentoo
GNOME Autoar: User-assisted execution of arbitrary code
2021-05-26 00:00:00
almalinux
almalinux
Moderate: GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2021-11-16 00:00:00
redhat
redhat
rocky
rocky
GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
ibm
ibm