CVE-2019-16680

Published: Sep 21, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://bugzilla.gnome.org/show_bug.cgi?id=794337

x_refsource_MISC

https://gitlab.gnome.org/GNOME/file-roller/commit/57268e51e59b61c9e3125eb0f65551c7084297e2

x_refsource_MISC

https://gitlab.gnome.org/GNOME/file-roller/commit/e8fb3e24dae711e4fb0d6777e0016cdda8787bc1

x_refsource_MISC

USN-4139-1

vendor-advisory

x_refsource_UBUNTU

DSA-4537

vendor-advisory

x_refsource_DEBIAN

20190929 [SECURITY] [DSA 4537-1] file-roller security update

mailing-list

x_refsource_BUGTRAQ

[debian-lts-announce] 20190930 [SECURITY] [DLA 1938-1] file-roller security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-16680

Description

Affected Products

References