ALT Linux Team

Package libtar update in sisyphus on 2020-10-30

ALT-PU-2020-3172-1

Package libtar updated to version 1.2.20-alt2.git.6d0ab4c for branch sisyphus in task 260678.

Closed vulnerabilities

Published: 2014-02-20
Modified: 2024-11-21

CVE-2013-4420

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

Severity: MEDIUM (5.8)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top