Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-opcacheUpgrade php-gdUpgrade php-intlUpgrade php-pgsqlUpgrade php-dbaUpgrade php-ffiUpgrade php-processUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade apcu-panelUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-mbstringUpgrade libzip-develUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-pearUpgrade libzipUpgrade phpUpgrade php-odbcUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-develUpgrade php-dbgUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-fpmUpgrade php-bcmathUpgrade php-gmpUpgrade php-pdoUpgrade php-cliUpgrade php-xmlUpgrade php-jsonUpgrade php-commonUpgrade php-pecl-zip | Oct 20, 2022 | Jan 18, 2021 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Jan 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Feb 22, 2021 | Jan 18, 2021 |
| Amazon_linux | — | Upgrade php7-pear | Feb 18, 2021 | Jan 18, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2021 |
| Centos_linux | — | Upgrade php-ldapUpgrade php-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pdoUpgrade libzip-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpm-debuginfoUpgrade php-json-debuginfoUpgrade php-pgsqlUpgrade php-dbgUpgrade phpUpgrade php-odbc-debuginfoUpgrade apcu-panelUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-ffi-debuginfoUpgrade php-commonUpgrade php-pecl-zip-debuginfoUpgrade php-bcmathUpgrade php-pearUpgrade php-jsonUpgrade php-mbstring-debuginfoUpgrade php-fpmUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-dba-debuginfoUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-cliUpgrade php-pecl-apcuUpgrade libzipUpgrade php-embeddedUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-ffiUpgrade libzip-toolsUpgrade php-pgsql-debuginfoUpgrade php-pdo-debuginfoUpgrade php-soapUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-process-debuginfoUpgrade php-xml-debuginfoUpgrade php-snmpUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-dbaUpgrade php-pecl-rrd-debuginfoUpgrade php-processUpgrade php-opcacheUpgrade php-gdUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-xmlrpcUpgrade php-soap-debuginfoUpgrade php-intlUpgrade php-intl-debuginfo | Oct 20, 2022 | Jan 18, 2021 |
| Debian | — | Upgrade php-pear | Jan 25, 2021 | Jan 18, 2021 |
| Drupal | — | Upgrade to drupal version 7.78Upgrade to drupal version 9.0.1Upgrade to drupal version 8.9.1Upgrade to drupal version 9.1.3 | Jan 25, 2021 | Jan 18, 2021 |
| Gentoo Linux | — | Upgrade dev-php/PEAR-Archive_Tar. | Jan 26, 2021 | Jan 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | May 18, 2021 | Jan 18, 2021 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-commonUpgrade php-pearUpgrade php-enchantUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-odbcUpgrade php-develUpgrade libzipUpgrade php-gdUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-soapUpgrade php-bcmathUpgrade php-xmlrpcUpgrade libzip-develUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-processUpgrade php-intlUpgrade php-ffiUpgrade libzip-toolsUpgrade php-xmlUpgrade apcu-panelUpgrade php-ldapUpgrade php-dbgUpgrade php-cliUpgrade php-dbaUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade php-snmpUpgrade php | Sep 17, 2022 | Jan 27, 2021 |
| Redhat_linux | — | Upgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pearUpgrade php-mysqlnd-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmpUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-enchantUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-jsonUpgrade php-processUpgrade php-cliUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-develUpgrade php-fpmUpgrade phpUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade php-common-debuginfoUpgrade php-soapUpgrade libzip-tools-debuginfoUpgrade php-gmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-json-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-debugsourceUpgrade apcu-panelUpgrade php-process-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcuUpgrade php-odbcNo solution existsUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbaUpgrade php-soap-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade libzip-develUpgrade php-intlUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php-pecl-xdebug-debugsourceUpgrade php-ffi-debuginfoUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-ffiUpgrade libzip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade libzipUpgrade php-pgsqlUpgrade php-pgsql-debuginfo | Oct 20, 2022 | Jan 18, 2021 |
| Rocky_linux | — | Upgrade php-pecl-rrd-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-jsonUpgrade php-pdoUpgrade libzip-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-odbcUpgrade php-develUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-ffi-debuginfoUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-ldapUpgrade php-pecl-zip-debugsourceUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade libzip-develUpgrade php-commonUpgrade libzip-debugsourceUpgrade php-ffiUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-processUpgrade php-fpm-debuginfoUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-process-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade phpUpgrade php-opcacheUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-dbaUpgrade php-cli-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-toolsUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debuginfo | Mar 12, 2024 | Jan 18, 2021 |
| Suse | — | Upgrade php72-ldapUpgrade php72-ftpUpgrade php72-zipUpgrade php7-wddxUpgrade php72-pdoUpgrade php72-xmlrpcUpgrade php72-sodiumUpgrade php72-readlineUpgrade php72-sqliteUpgrade php72-pear-archive_tarUpgrade php72-mysqlUpgrade php72-fastcgiUpgrade php72-gmpUpgrade php72Upgrade php72-iconvUpgrade php72-pgsqlUpgrade php72-curlUpgrade php72-imapUpgrade php72-fpmUpgrade php7-peclUpgrade php72-xmlwriterUpgrade php72-odbcUpgrade php74-peclUpgrade php72-xmlreaderUpgrade php72-sysvsemUpgrade php72-socketsUpgrade php72-snmpUpgrade php72-pspellUpgrade php74-pearUpgrade php72-bz2Upgrade php72-soapUpgrade php72-zlibUpgrade php72-ctypeUpgrade php72-bcmathUpgrade php72-gettextUpgrade apache2-mod_php72Upgrade php72-develUpgrade php72-wddxUpgrade php72-enchantUpgrade php72-pharUpgrade php72-jsonUpgrade php72-xslUpgrade php72-sysvmsgUpgrade php72-sysvshmUpgrade php72-posixUpgrade php72-exifUpgrade php72-opcacheUpgrade php72-fileinfoUpgrade php72-opensslUpgrade php72-mbstringUpgrade php72-pcntlUpgrade php72-domUpgrade php72-tidyUpgrade php7-pearUpgrade php72-tokenizerUpgrade php72-dbaUpgrade php72-calendarUpgrade php72-intlUpgrade php72-shmopUpgrade php72-pearUpgrade php72-gd | Aug 31, 2021 | Jan 18, 2021 |
| Ubuntu | — | Upgrade php-pear | Feb 9, 2021 | Jan 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub