Vulnerability Database

290,278

Total vulnerabilities in the database

CVE-2020-36314

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.

  • Published: Apr 7, 2021
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-36314
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.9
  • AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

CVSS v2:

  • Severity: Low
  • Score: 2.6
  • AV:L/AC:H/Au:N/C:N/I:P/A:P

CWEs:

Software From Fixed in
gnome / file-roller - 3.38.0.x
fedoraproject / fedora 34 34.x