CVE-2020-11736
13.04.2020, 19:15
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnome | file-roller | 𝑥 ≤ 3.36.1 |
| debian | debian_linux | 8.0 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.10 |
| canonical | ubuntu_linux | 20.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| file-roller |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| file-roller-lang |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| nautilus-file-roller |
|
References