Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-28949HistoryNov 19, 2020 - 7:15 p.m.
CVE-2020-28949
2020-11-1919:15:11
Debian Security Bug Tracker
security-tracker.debian.org
19
archive_tar
filename sanitization
vulnerability
unix
stream-wrapper attack
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.935
Percentile
99.1%
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | php-pear | < 1:1.10.9+submodules+notgz-1.1 | php-pear_1:1.10.9+submodules+notgz-1.1_all.deb |
| Debian | 11 | all | php-pear | < 1:1.10.9+submodules+notgz-1.1 | php-pear_1:1.10.9+submodules+notgz-1.1_all.deb |
| Debian | 999 | all | php-pear | < 1:1.10.9+submodules+notgz-1.1 | php-pear_1:1.10.9+submodules+notgz-1.1_all.deb |
| Debian | 13 | all | php-pear | < 1:1.10.9+submodules+notgz-1.1 | php-pear_1:1.10.9+submodules+notgz-1.1_all.deb |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2021-1345)
2021-02-22 00:00:00
Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2021-1111)
2021-01-19 00:00:00
Ubuntu: Security Advisory (USN-4654-1)
2020-12-02 00:00:00
cve
cve
CVE-2020-28949
2020-11-19 19:15:11
osv
osv
BIT-drupal-2020-28949
2024-03-06 10:56:00
Multiple vulnerabilities through filename manipulation in Archive_Tar
2021-04-22 16:20:59
CVE-2020-28949
2020-11-19 19:15:11
packetstorm
packetstorm
PEAR Archive_Tar Arbitrary File Write
2021-01-25 00:00:00
cisa_kev
cisa_kev
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
2022-08-25 00:00:00
friendsofphp
friendsofphp
Potential file overwrite if archive filename starts with file://
2020-11-20 00:00:00
github
github
Multiple vulnerabilities through filename manipulation in Archive_Tar
2021-04-22 16:20:59
Drupal core Arbitrary PHP code execution
2024-05-15 21:02:35
Drupal core Arbitrary PHP code execution
2024-05-15 20:50:24
nessus
nessus
EulerOS 2.0 SP3 : php-pear (EulerOS-SA-2021-1111)
2021-01-20 00:00:00
EulerOS 2.0 SP2 : php-pear (EulerOS-SA-2021-1345)
2021-02-22 00:00:00
veracode
veracode
PHAR Unserialization
2020-11-20 03:05:45
prion
prion
Code injection
2020-11-19 19:15:00
redhatcve
redhatcve
CVE-2020-28949
2020-12-23 13:31:50
alpinelinux
alpinelinux
CVE-2020-28949
2020-11-19 19:15:11
cvelist
cvelist
CVE-2020-28949
2020-11-19 18:14:18
nvd
nvd
CVE-2020-28949
2020-11-19 19:15:11
metasploit
metasploit
PEAR Archive_Tar 1.4.10 Arbitrary File Write
2021-01-15 22:20:06
debian
debian
[SECURITY] [DLA 2465-1] php-pear security update
2020-11-23 11:15:52
[SECURITY] [DLA 2466-1] drupal7 security update
2020-11-27 09:58:18
[SECURITY] [DSA 4817-1] php-pear security update
2020-12-19 09:59:46
ubuntu
ubuntu
PEAR vulnerabilities
2020-12-01 00:00:00
Drupal vulnerabilities
2024-08-27 00:00:00
Drupal vulnerabilities
2024-09-03 00:00:00
amazon
amazon
Medium: php7-pear
2021-01-12 22:51:00
Medium: php-pear
2021-01-05 23:34:00
fedora
fedora
[SECURITY] Fedora 32 Update: php-pear-1.10.12-4.fc32
2020-12-02 10:40:00
[SECURITY] Fedora 33 Update: php-pear-1.10.12-4.fc33
2020-12-02 10:40:12
[SECURITY] Fedora 34 Update: drupal7-7.82-1.fc34
2021-09-19 04:48:53
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Php Archive Tar
2020-11-27 11:21:46
Exploit for Deserialization of Untrusted Data in Php Archive Tar
2021-05-24 15:36:16
f5
f5
K58581302 : Archive_Tar vulnerabilities CVE-2020-28948 and CVE-2020-28949
2020-12-03 00:00:00
ubuntucve
ubuntucve
CVE-2020-28949
2020-11-19 00:00:00
mageia
mageia
Updated php-pear packages fix security vulnerabilities
2020-12-08 13:40:32
drupal
drupal
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2020-013
2020-11-25 00:00:00
attackerkb
attackerkb
CVE-2020-28949
2020-11-19 00:00:00
gentoo
gentoo
PEAR Archive_Tar: Directory traversal
2021-01-26 00:00:00
oraclelinux
oraclelinux
php:7.4 security update
2022-09-16 00:00:00
php-pear security update
2022-11-03 00:00:00
redhat
redhat
(RHSA-2022:6541) Moderate: php:7.4 security update
2022-09-15 08:06:49
(RHSA-2022:6542) Moderate: php:7.4 security update
2022-09-15 08:06:55
(RHSA-2022:7340) Moderate: php-pear security update
2022-11-02 16:04:25
rocky
rocky
php:7.4 security update
2022-09-15 08:06:55
almalinux
almalinux
Moderate: php:7.4 security update
2022-09-15 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-01-29 21:09:49
thn
thn
CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
2022-08-29 04:23:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.935
Percentile
99.1%
Related for DEBIANCVE:CVE-2020-28949