Astra Linux – Vulnerability in ARK

The libarchiveplugin.cpp file in the KDE archive prior to version 24.12.0 can extract to an absolute path from an archive...

Debian dsa-6029 : ark - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-6029 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6029-1 [email protected] https://www.debian.org/security/ Moritz...

Slackware Linux 15.0 / current ark Vulnerability (SSA:2025-051-01)

The version of ark installed on the remote host is prior to 21.12.1 / 23.08.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-051-01 advisory. New ark packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

SUSE CVE-2024-57966

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Ark vulnerability (USN-4482-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4482-1 advisory. Fabian Vogt discovered that Ark incorrectly handled symbolic links in tar archive files. An attacker could use this to construct a malicio...

OPENSUSE-SU-2020:1310-1 Security update for ark

This update for ark fixes the following issues: - CVE-2020-24654: maliciously crafted TAR archive can install files outside the extraction directory boo1175857...

USN-4461-1 ark vulnerability

Dominik Penner discovered that Ark did not properly sanitize zip archive files before performing extraction. An attacker could use this to construct a malicious zip archive that, when opened, would create files outside the extraction directory...

OPENSUSE-SU-2017:0140-1 Security update for ark

This update for ark fixes the following issues: - CVE-2017-5330: ark could run executable scripts when clicking on them boo1018648...

KDE Ark Arbitrary Code Execution Vulnerability

KDE is a free and open source X desktop management program for Linux and Unix workstations.KDE provides support for various network protocols through the KIO subsystem.Ark is one of the archive tools. An arbitrary code execution vulnerability exists in KDE Ark versions prior to 16.12.1. An attack...