CVE-2020-36314 Path traversal in n/a
An attacker can exploit a directory traversal vulnerability in GNOME file-roller to write files outside the intended extraction directory, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-36314?
CVE-2020-36314 is a low-severity path traversal vulnerability in Fedoraproject Fedora, published on 7 Apr 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.
Weakness: CWE-59
Which versions are affected by CVE-2020-36314?
It affects 2 products.
Linux distribution packages (5)
file-roller Red Hat:enterprise_linux:8::appstream | All versions | 0:3.28.1-4.el8 |
file-roller-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:3.28.1-4.el8 |
file-roller-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:3.28.1-4.el8 |
file-roller Rocky Linux:8 | All versions | 0:3.28.1-4.el8 |
file-roller SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 3.20.3-15.9.1 |
Products include Fedoraproject Fedora, Gnome File-Roller.
How do I fix CVE-2020-36314?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-36314 being exploited?
There is no known exploitation of CVE-2020-36314 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as CLSA-2022-1643124469, DEBIAN-CVE-2020-36314, GHSA-xf7f-5p7r-xc3c, MGASA-2021-0311, RHSA-2021:4179, RLSA-2021:4179 and 3 more.