CVE-2007-4559

mediumpriority · attend · 46EPSS 0.271 · 98 %ileexploit · PoCDEEUNLRUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

7 exploits · PoC

Likely / severe?

27.1% (98th) EPSS

CVSS 6.8 · medium

Is it mine?

38 products

Check your exposure

Who says so?

6 sources

enisa_euvd · fstec_bdu · osv · cert_bund

EPSS · scored 2026-10-22

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedlibpython3_4m1_0-0:3.4.10-25.169.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_4m1_0-0:3.4.10-25.169.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_4m1_0-0:3.4.10-25.169.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_4m1_0-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_4m1_0-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_4m1_0-32bit-0:3.4.10-25.169.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_4m1_0-32bit-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_4m1_0-32bit-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-0:3.4.10-25.169.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-0:3.4.10-25.169.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-0:3.4.10-25.169.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-base-0:3.4.10-25.169.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-base-0:3.4.10-25.169.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-base-0:3.4.10-25.169.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-base-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-base-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-curses-0:3.4.10-25.169.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-curses-0:3.4.10-25.169.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-curses-0:3.4.10-25.169.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-curses-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-curses-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-devel-0:3.4.10-25.169.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-devel-0:3.4.10-25.169.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-devel-0:3.4.10-25.169.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-devel-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-devel-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-tk-0:3.4.10-25.169.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-tk-0:3.4.10-25.169.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-tk-0:3.4.10-25.169.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-tk-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-tk-0:3.4.10-25.169.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.4–9.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.17.3highAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 3.9 · impact 5.9

v3.19.3criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Lsecondary · SUSE Product Security

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-22USprimaryCWE-22USCWE-22USCWE-22US

exploits (7)

Public proof-of-concept and weaponised exploit code.

Ooscaar/MALWCVE-2007-4559 - Polemarch exploitPoC · poc_in_github
advanced-threat-research/CreosoteCreosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.PoC · poc_in_github
davidholiday/CVE-2007-4559davidholiday/CVE-2007-4559PoC · poc_in_github
depers-rus/CVE-2007-4559depers-rus/CVE-2007-4559PoC · poc_in_github
jithinodattu/CVE-2007-4559-labjithinodattu/CVE-2007-4559-labPoC · poc_in_github
luigigubello/trellix-tarslip-patch-bypassBypass for CVE-2007-4559 Trellix patchPoC · poc_in_github

affected products (38)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Dell Avamarall versionscert_bundDEcpe:/a:dell:avamar:-
Dell NetWorker Virtual Editionall versionscert_bundDEcpe:/a:dell:networker:virtual_edition
Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
IBM SPSSall versionscert_bundDEcpe:/a:ibm:spss:modeler
Open Source Pythonall versionscert_bundDEcpe:/a:python:python:-
Open Source Samba <4.18.6all versionscert_bundDE
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat OpenShift Data Foundation <4.12.10all versionscert_bundDE
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Open Source Samba< 4.18.6cert_bundDE
Red Hat OpenShift≤ Data Foundation <4.12.10cert_bundDE
n/a n/a≤ n/aenisa_euvdEU
Project Harbor harbor≤ 2.7.0fstec_bduRU
Python Software Foundation Python≤ 3.6.16fstec_bduRU
Python Software Foundation Python3.10.0 → 3.10.12fstec_bduRU
Python Software Foundation Python3.11.0 → 3.11.4fstec_bduRU
Python Software Foundation Python3.7.0 → 3.8.17fstec_bduRU

showing 20 of 38

advisories (7)

Vendor and ecosystem advisories describing this.

NCSC-2024-0339Kwetsbaarheden verholpen in Microsoft MarinerNL2024-08-13csaf · ncsc_nlNL
Microsoft heeft kwetsbaarheden verholpen in Mariner (Azure Linux).
SUSE-SU-2026:0210-1Security update for python32026-01-22csaf · suse_csafDE
Security update for python3
WID-SEC-W-2022-1501Python: Schwachstelle ermöglicht CodeausführungDeutsch2022-09-21csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um beliebigen Programmcode auszuführen.
WID-SEC-W-2024-1086IBM QRadar SIEM: Mehrere SchwachstellenDeutsch2024-05-09csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.
BIT-python-2007-45592026-02-03vendor · osvUS
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
BIT-python-min-2007-45592026-02-03vendor · osvUS
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
PSF-2007-2Directory path traversal in extract() and extractall() tarfile functions via '..' (dot dot) sequences2007-08-28vendor · osvUS
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

also known as (6)

Other names and identifiers for this entity.

EUVD-2007-4541 enisa_euvd
BDU:2022-05975 fstec_bdu
GHSA-gw9q-c7gh-j9vm enisa_euvd
BIT-python-2007-4559osv
BIT-python-min-2007-4559osv
PSF-2007-2osv

sources

Which sources assert this record, and when.

enisa_euvd fstec_bdu osv cert_bund ncsc_nl suse_csaf NVD CVE.org MITRE

published 2007-08-28modified 2026-06-16

related (12,465)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-104286US	—OT critical	2.20% (82nd)	KEV	2026-10-01
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail…
CVE-2026-93616US	—OT critical	75.9% (100th)	KEV	2026-09-22
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
CVE-2026-85706US	—OT critical	92.0% (100th)	KEV	2026-09-12
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2…
CVE-2026-66384US	—OT critical	0.66% (51st)	KEV	2026-08-12
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-59310US	—OT critical	2.56% (85th)	KEV	2026-07-30
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

+12460 more

references (21)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan