CVE-2020-36314 — Path Traversal in File-roller

CWE-22 — Path Traversal6 documents6 sources
Severity
3.9LOWNVD
EPSS
0.1%
top 82.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Gnome File-rollerDebian File-rollerFedoraproject Fedora
Timeline
PublishedApr 7
Latest updateMay 24

Description

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:LExploitability: 1.3 | Impact: 2.5

Affected Packages3 packages

▶Debiangnome/file-roller< 3.38.1-1+3
▶NVDgnome/file-roller3.38.0
▶debiandebian/file-roller< file-roller 3.38.1-1 (bookworm)

Also affects: Fedora 34

Patches

Patch: gitlab.gnome.org ↗Patch: gitlab.gnome.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-xf7f-5p7r-xc3c: fr-archive-libarchive↗2022-05-24
▶
OSV
CVE-2020-36314: fr-archive-libarchive↗2021-04-07
▶

📋Vendor Advisories

3
Ubuntu
File Roller vulnerability↗2021-04-26
▶
Red Hat
file-roller: directory traversal via directory symlink pointing outside of the target directory (incomplete fix for CVE-2020-11736)↗2021-02-15
▶
Debian
CVE-2020-36314: file-roller - fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Sh...↗2020
▶
CVE-2020-36314 — Path Traversal in Debian File-roller | cvebase