CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

GNOME file-roller path traversal vulnerability (CNVD-2020-22856)

GNOME file-roller is a compressed file manager for use on the GNOME desktop. A path traversal vulnerability exists in the fr-archive-libarchive.c file in GNOME file-roller 3.36.1 and earlier. The vulnerability stems from a failure of a networked system or product to properly filter for special...

CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

DEBIAN-CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

UBUNTU-CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

Directory traversal

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

CVE-2020-11736

The CVE concerns GNOME File Roller (fr-archive-libarchive.c) where directory traversal can occur during extraction due to a missing check on whether a file’s parent is a symlink outside the extraction directory. Public advisories link this to an incomplete fix for CVE-2020-11736 (and relate to CV...

CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

PT-2020-5640

Name of the Vulnerable Software and Affected Versions File Roller versions 3.36.1 and earlier Description The issue allows Directory Traversal during extraction due to a lack of check on whether a file's parent is a symlink to a directory outside of the intended extraction location. This is cause...

CVE-2020-11736: Improper Limitation of a Pathname to a Restricted Directory

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

File Roller sanitize_filename Heap Buffer Overflow DoS

The vulnerability of the sanitizefilename function in the src/glib-utils.c file of the File Roller archive manager is related to a lack of mechanisms to restrict the path to the restricted directory. Exploiting this vulnerability could allow an attacker to cause service failure through a speciall...

CVE-2019-16680

A path traversal vulnerability was discovered in the file-roller Archive Manager for GNOME in the way file paths with special characters are sanitized. Archives containing the sequence of characters "../" in a file path may be vulnerable to this flaw. A remote attacker could exploit this flaw by...

Debian: Security Advisory (DLA-1938-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1938-1 : file-roller security update

An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction. For Debian 8 'Jessie', this problem has been fixed in version 3.14.1-1+deb8u1. We recommend that you upgra...

[SECURITY] [DLA 1938-1] file-roller security update

Package : file-roller Version : 3.14.1-1+deb8u1 CVE ID : CVE-2019-16680 An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction. For Debian 8 "Jessie", this proble...

Debian DSA-4537-1 : file-roller - security update

It was discovered that file-roller, an archive manager for GNOME, does not properly handle the extraction of archives with a single ./../ in a file path. An attacker able to provide a specially crafted archive for processing can take advantage of this flaw to overwrite files if a user is dragging...