In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcuUpgrade php-ldapUpgrade php-develUpgrade php-processUpgrade php-mbstringUpgrade libzipUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-soapUpgrade php-odbcUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pearUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-enchantUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-bcmathUpgrade php-cliUpgrade libzip-develUpgrade php-ffiUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-commonUpgrade php-xmlUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-intlUpgrade php-embeddedUpgrade php-dbgUpgrade php-snmpUpgrade php | Nov 14, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Jul 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Sep 16, 2021 | Jul 30, 2021 |
| Centos_linux | — | Upgrade php-commonUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-cli-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-ffiUpgrade php-cliUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade apcu-panelUpgrade libzip-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-pgsqlUpgrade php-opcacheUpgrade php-embeddedUpgrade php-odbcUpgrade php-pecl-rrdUpgrade php-processUpgrade php-mbstring-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-snmpUpgrade libzip-develUpgrade php-fpm-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdo-debuginfoUpgrade php-gmp-debuginfoUpgrade php-ffi-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dbaUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-dbgUpgrade php-debugsourceUpgrade php-ldapUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-develUpgrade php-soapUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-pearUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xml-debuginfoUpgrade php-gdUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-fpmUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-xmlUpgrade php-jsonUpgrade php-xmlrpc-debuginfo | Nov 9, 2022 | Jul 30, 2021 |
| Debian | — | Upgrade php-pear | Jul 28, 2021 | Jul 28, 2021 |
| Drupal | — | Upgrade to drupal version 7.82Upgrade to drupal version 9.1.1Upgrade to drupal version 8.9.1Upgrade to drupal version 9.2.2 | Mar 23, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Sep 24, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade php-commonUpgrade libzip-develUpgrade php-snmpUpgrade php-xmlUpgrade libzipUpgrade php-odbcUpgrade php-mysqlndUpgrade php-pdoUpgrade php-gmpUpgrade php-opcacheUpgrade php-fpmUpgrade php-bcmathUpgrade php-pearUpgrade phpUpgrade php-develUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-cliUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-gdUpgrade php-ffiUpgrade php-enchantUpgrade php-embeddedUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-processUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-intlUpgrade libzip-toolsUpgrade php-pgsql | Nov 16, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade apcu-panelUpgrade php-cliUpgrade php-dbg-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-toolsUpgrade php-dba-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlUpgrade php-soap-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-debuginfoUpgrade libzip-develUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-processUpgrade libzip-debugsourceUpgrade php-mysqlndUpgrade php-odbcUpgrade php-opcache-debuginfoUpgrade php-ffiUpgrade libzip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-develUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebug-debuginfoNo solution existsUpgrade php-pecl-zipUpgrade php-pecl-apcu-debugsourceUpgrade php-soapUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade phpUpgrade php-ldapUpgrade php-dbgUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-pdo-debuginfoUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-enchantUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-pecl-zip-debugsourceUpgrade php-ffi-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-gdUpgrade libzipUpgrade php-pecl-xdebugUpgrade php-fpm-debuginfo | Nov 9, 2022 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade php-bcmathUpgrade php-json-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-debugsourceUpgrade libzip-debugsourceUpgrade php-ldapUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-soapUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-ffiUpgrade php-enchant-debuginfoUpgrade php-fpm-debuginfoUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-intlUpgrade php-embeddedUpgrade php-bcmath-debuginfoUpgrade php-odbcUpgrade phpUpgrade php-enchantUpgrade php-opcacheUpgrade libzip-develUpgrade php-dbaUpgrade php-embedded-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pgsqlUpgrade php-gmp-debuginfoUpgrade libzipUpgrade php-mysqlndUpgrade php-ffi-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-cliUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpcUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-fpmUpgrade libzip-tools-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pdoUpgrade php-xml-debuginfoUpgrade php-mbstringUpgrade php-gdUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-jsonUpgrade php-develUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebug-debuginfo | Mar 12, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade php8-peclUpgrade php8-pear | Oct 26, 2022 | Jul 30, 2021 |
| Ubuntu | — | Upgrade php-pearUpgrade php-pear (Ubuntu Pro) | Aug 5, 2021 | Jul 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub