CVE-2013-4420 — Path Traversal in Libtar
Severity
5.8MEDIUMNVD
EPSS
0.4%
top 40.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 20
Latest updateJun 11
Description
Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.
CVSS vector
AV:N/AC:M/C:N/I:P/A:PExploitability: 8.6 | Impact: 4.9
Affected Packages23 packages
🔴Vulnerability Details
2GHSA▶
GHSA-35h8-7h6c-x54q: Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1↗2022-05-17
OSV▶
CVE-2013-4420: Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1↗2014-02-20