Improper Link Resolution Vulnerability in Libarchive by the Libarchive Team

CVE-2021-23177

What is CVE-2021-23177?

An improper link resolution vulnerability in Libarchive allows attackers to alter the access control list (ACL) of extracted files. By crafting a malicious archive, an attacker could exploit this flaw during the extraction process, potentially granting escalated privileges on the victim’s system. This vulnerability highlights the risk associated with archive extraction and underscores the need for users to be cautious when handling unknown or untrusted archives.

References