Links in archive can create arbitrary directories
When unpacking a tarball that contains a symlink the tar crate may create directories outside of the directory it's supposed to unpack into. The function errors when it's trying to create a file, but the folders are already created at this point.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-38511US | high7.5 | — | ||
An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/alexcrichton/tar-rsPACKAGE
- https://github.com/alexcrichton/tar-rs/issues/238WEB
- https://github.com/alexcrichton/tar-rs/pull/259WEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-38511ADVISORY
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tar/RUSTSEC-2021-0080.mdWEB
- https://rustsec.org/advisories/RUSTSEC-2021-0080.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan