Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7 MGASA-2020-0323 Critical: Ark File Path Exploit

mageia
Calendar Grey August 18, 2020
Dist Mageia Esm H88
Mageia has released a security patch to address a vulnerability in the ark package that allowed unauthorized file changes during extraction. More details available
A maliciously crafted archive with "../" in the file paths would install files anywhere in the user's home directory upon extraction (CVE-2020-16116)

Summary

A maliciously crafted archive with "../" in the file paths would install files anywhere in the user's home directory upon extraction (CVE-2020-16116).

References

- https://bugs.mageia.org/show_bug.cgi?id=27023

- https://kde.org/info/security/advisory-20200730-1.txt

- https://www.cve.org/CVERecord?id=CVE-2020-16116

Topics%20covered

Topics Covered

security advisory information disclosure archive exploit Mageia file path manipulation

Resolution

SRPMS

- 7/core/ark-19.04.0-1.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 18 Aug 2020
URL: https://advisories.mageia.org/MGASA-2020-0323.html
Type: security
CVE: CVE-2020-16116

Topics%20covered

Topics Covered

security advisory information disclosure archive exploit Mageia file path manipulation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here