CVE-2021-32760 Archive package allows chmod of file outside of unpack target directory

🗓️ 19 Jul 2021 00:00:00Reported by GitHub_MType

CVE-2021-32760 Archive package allows chmo

Reporter	Title	Published	Views	Family All 132
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-32760)	6 Aug 202110:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse® on Cloud Pak for Data	19 Apr 202420:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	26 Mar 202503:52	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
GithubExploit	Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Containerd	29 Mar 202619:15	–	githubexploit
GithubExploit	Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Containerd	29 Mar 202619:03	–	githubexploit

[
  {
    "vendor": "containerd",
    "product": "containerd",
    "versions": [
      {
        "version": "<= 1.4.7",
        "status": "affected"
      },
      {
        "version": ">= 1.5.0, <= 1.5.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w
github	www.github.com/containerd/containerd/releases/tag/v1.4.8
security	www.security.gentoo.org/glsa/202401-31
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3/
github	www.github.com/containerd/containerd/releases/tag/v1.5.4

31 Jan 2024 13:06Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15

EPSS0.01608

CWE-668