In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbgUpgrade php-xmlUpgrade libzip-toolsUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-opcacheUpgrade php-commonUpgrade php-ffiUpgrade php-embeddedUpgrade libzip-develUpgrade php-snmpUpgrade phpUpgrade php-cliUpgrade php-intlUpgrade php-develUpgrade php-bcmathUpgrade php-ldapUpgrade php-pearUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-mbstringUpgrade php-fpmUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-processUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-odbcUpgrade php-enchantUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-soap | Nov 14, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Jul 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Sep 16, 2021 | Jul 30, 2021 |
| Centos_linux | — | Upgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-odbcUpgrade libzip-develUpgrade php-ldapUpgrade php-ffiUpgrade php-pdo-debuginfoUpgrade php-dbaUpgrade php-embedded-debuginfoUpgrade php-json-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-opcacheUpgrade php-ldap-debuginfoUpgrade php-pecl-rrdUpgrade php-snmpUpgrade php-opcache-debuginfoUpgrade php-pgsqlUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-mbstring-debuginfoUpgrade apcu-panelUpgrade php-pecl-rrd-debugsourceUpgrade phpUpgrade php-mysqlndUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-intlUpgrade php-cliUpgrade php-processUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ffi-debuginfoUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-dbgUpgrade php-debugsourceUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzipUpgrade php-mbstringUpgrade php-jsonUpgrade php-xmlUpgrade php-pdoUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade php-gmpUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-develUpgrade libzip-tools-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pear | Nov 9, 2022 | Jul 30, 2021 |
| Debian | — | Upgrade php-pear | Jul 28, 2021 | Jul 28, 2021 |
| Drupal | — | Upgrade to drupal version 9.2.2Upgrade to drupal version 8.9.1Upgrade to drupal version 9.1.1Upgrade to drupal version 7.82 | Mar 23, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Sep 24, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade php-commonUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-cliUpgrade php-develUpgrade php-xmlUpgrade php-fpmUpgrade php-pearUpgrade php-snmpUpgrade phpUpgrade php-ldapUpgrade php-opcacheUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-mysqlndUpgrade libzipUpgrade php-gmpUpgrade libzip-develUpgrade php-bcmathUpgrade php-jsonUpgrade apcu-panelUpgrade php-enchantUpgrade php-ffiUpgrade php-soapUpgrade php-processUpgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-mbstringUpgrade php-intlUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-dbaUpgrade php-xmlrpc | Nov 16, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade php-dbgUpgrade php-bcmathUpgrade php-develUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-gmp-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-ldapUpgrade php-enchantUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-jsonUpgrade php-pecl-apcu-debugsourceNo solution existsUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-gdUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debugsourceUpgrade php-ffi-debuginfoUpgrade php-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade apcu-panelUpgrade php-snmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-commonUpgrade libzip-toolsUpgrade php-intlUpgrade php-cliUpgrade php-process-debuginfoUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade php-pgsqlUpgrade php-mbstringUpgrade libzip-develUpgrade php-common-debuginfoUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade libzip-debuginfoUpgrade libzip-debugsourceUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-ffiUpgrade php-process | Nov 9, 2022 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade libzip-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pdo-debuginfoUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-enchantUpgrade php-dba-debuginfoUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ffiUpgrade php-common-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade libzip-toolsUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gd-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-bcmathUpgrade libzip-develUpgrade php-snmpUpgrade php-ldapUpgrade php-dbgUpgrade php-odbcUpgrade php-intlUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-xmlUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-gdUpgrade php-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-commonUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-ldap-debuginfo | Mar 12, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade php8-pearUpgrade php8-pecl | Oct 26, 2022 | Jul 30, 2021 |
| Ubuntu | — | Upgrade php-pear (Ubuntu Pro)Upgrade php-pear | Aug 5, 2021 | Jul 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub