ALPINE-CVE-2021-31566
Dashboard / Vulnerabilities / ALPINE-CVE-2021-31566
Summary:
Details: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.
Affected packages
Package
Name: libarchive
Purl: pkg:apk/alpine/libarchive?arch=source
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -3.5.3-r0
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
