CVE-2019-16680 Path traversal in n/a

Medium 4.3 Published 21 Sep 2019 Updated 5 Aug 2024

An attacker can overwrite arbitrary files by crafting a TAR archive with a specific path traversal filename, affecting users of GNOME file-roller.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2019-16680?

CVE-2019-16680 is a medium-severity path traversal vulnerability in Canonical Ubuntu Linux, published on 21 Sep 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.

Weakness: CWE-22

Which versions are affected by CVE-2019-16680?

It affects 4 products.

Linux distribution packages (4)

`file-roller` SUSE:Linux Enterprise Server 12 SP4	All versions	`3.20.3-15.3.25`
`file-roller` SUSE:Linux Enterprise Server 12 SP5	All versions	`3.20.3-15.3.25`
`file-roller` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	All versions	`3.20.3-15.3.25`
`file-roller` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	All versions	`3.20.3-15.3.25`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Gnome File-Roller, Redhat Enterprise Linux.

How do I fix CVE-2019-16680?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2019-16680 being exploited?

There is no known exploitation of CVE-2019-16680 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2019-16680, DLA-1938-1, DSA-4537-1, GHSA-63pg-53ch-332g, SUSE-SU-2020:1088-1, UBUNTU-CVE-2019-16680 and 1 more.