Lucene search

@huntr_aiCVELIST:CVE-2024-2914

HistoryJun 06, 2024 - 5:55 p.m.

CVE-2024-2914 TarSlip Vulnerability in deepjavalibrary/djl

2024-06-0617:55:55

CWE-29

@huntr_ai

www.cve.org

tarslip vulnerability

deepjavalibrary/djl

version 0.26.0

path manipulation

remote code execution

data theft

denial of service

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

38.6%

JSON

A TarSlip vulnerability exists in the deepjavalibrary/djl, affecting version 0.26.0 and fixed in version 0.27.0. This vulnerability allows an attacker to manipulate file paths within tar archives to overwrite arbitrary files on the target system. Exploitation of this vulnerability could lead to remote code execution, privilege escalation, data theft or manipulation, and denial of service. The vulnerability is due to improper validation of file paths during the extraction of tar files, as demonstrated in multiple occurrences within the library’s codebase, including but not limited to the files_util.py and extract_imagenet.py scripts.

CNA Affected

[
  {
    "vendor": "deepjavalibrary",
    "product": "deepjavalibrary/djl",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.27.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/deepjavalibrary/djl/commit/5235be508cec9e8cb6f496a4ed2fa40e4f62c370

huntr.com/bounties/b064bd2f-bf6e-4fc0-898e-7d02a9b97e24

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

38.6%

JSON

Related for CVELIST:CVE-2024-2914