In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-dbgUpgrade php-mysqlndUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-snmpUpgrade php-cliUpgrade php-intlUpgrade phpUpgrade php-xmlUpgrade php-ffiUpgrade libzip-develUpgrade apcu-panelUpgrade php-embeddedUpgrade php-processUpgrade php-bcmathUpgrade php-enchantUpgrade php-pdoUpgrade php-odbcUpgrade php-fpmUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-develUpgrade php-ldapUpgrade php-pgsqlUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade libzipUpgrade php-pearUpgrade php-gdUpgrade php-pecl-zip | Nov 14, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Jul 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Sep 16, 2021 | Jul 30, 2021 |
| Centos_linux | — | Upgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-processUpgrade php-snmp-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-gmp-debuginfoUpgrade php-cliUpgrade php-ffiUpgrade php-pecl-rrdUpgrade php-pecl-zip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmpUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-odbcUpgrade php-ldapUpgrade php-soap-debuginfoUpgrade php-mysqlndUpgrade php-debugsourceUpgrade libzip-debuginfoUpgrade php-dbgUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-bcmathUpgrade libzipUpgrade php-intl-debuginfoUpgrade php-fpmUpgrade php-mysqlnd-debuginfoUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-pearUpgrade php-enchant-debuginfoUpgrade php-soapUpgrade php-pecl-apcuUpgrade libzip-tools-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade php-mbstring | Nov 9, 2022 | Jul 30, 2021 |
| Debian | — | Upgrade php-pear | Jul 28, 2021 | Jul 28, 2021 |
| Drupal | — | Upgrade to drupal version 9.2.2Upgrade to drupal version 9.1.1Upgrade to drupal version 7.82Upgrade to drupal version 8.9.1 | Mar 23, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Sep 24, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pearUpgrade libzip-develUpgrade php-opcacheUpgrade php-fpmUpgrade php-bcmathUpgrade php-gmpUpgrade php-commonUpgrade php-odbcUpgrade php-pdoUpgrade php-ldapUpgrade libzipUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-develUpgrade php-xmlUpgrade php-mysqlndUpgrade php-snmpUpgrade php-cliUpgrade phpUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-intlUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-processUpgrade apcu-panelUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-gdUpgrade php-enchantUpgrade php-embeddedUpgrade php-ffiUpgrade php-soap | Nov 16, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade php-enchantUpgrade phpUpgrade php-xmlrpc-debuginfoUpgrade php-embeddedUpgrade php-fpmUpgrade php-fpm-debuginfoUpgrade php-jsonUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-pearUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-enchant-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-debugsourceUpgrade php-pecl-xdebugUpgrade php-ffi-debuginfoUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade libzipUpgrade php-pecl-xdebug-debuginfoNo solution existsUpgrade php-develUpgrade php-json-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-ldapUpgrade php-pdoUpgrade php-gmpUpgrade php-mbstring-debuginfoUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-embedded-debuginfoUpgrade libzip-toolsUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intl-debuginfoUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade libzip-develUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-dbg-debuginfoUpgrade php-intlUpgrade php-cliUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-mysqlndUpgrade php-ffiUpgrade php-ldap-debuginfoUpgrade php-processUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-pecl-rrd-debugsourceUpgrade php-soap-debuginfoUpgrade php-opcache | Nov 9, 2022 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-develUpgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-intl-debuginfoUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-processUpgrade php-xmlrpcUpgrade php-ffiUpgrade php-pecl-zip-debuginfoUpgrade php-embeddedUpgrade php-dbaUpgrade php-soap-debuginfoUpgrade libzip-debuginfoUpgrade php-ffi-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ldapUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-process-debuginfoUpgrade php-common-debuginfoUpgrade php-enchantUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade libzipUpgrade phpUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-pecl-rrd-debugsourceUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-cliUpgrade php-mysqlndUpgrade php-dbgUpgrade php-pecl-xdebug-debugsourceUpgrade php-snmpUpgrade php-opcacheUpgrade php-odbcUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchant-debuginfo | Mar 12, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade php8-pearUpgrade php8-pecl | Oct 26, 2022 | Jul 30, 2021 |
| Ubuntu | — | Upgrade php-pearUpgrade php-pear (Ubuntu Pro) | Aug 5, 2021 | Jul 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub