Improper Link Resolution Vulnerability in Libarchive by the Libarchive Team
CVE-2021-23177

7.8HIGH

Key Information:

Vendor

Libarchive

Status
Libarchive
Vendor
CVE Published:
23 August 2022

What is CVE-2021-23177?

An improper link resolution vulnerability in Libarchive allows attackers to alter the access control list (ACL) of extracted files. By crafting a malicious archive, an attacker could exploit this flaw during the extraction process, potentially granting escalated privileges on the victim’s system. This vulnerability highlights the risk associated with archive extraction and underscores the need for users to be cautious when handling unknown or untrusted archives.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

libarchive Fixed in libarchive 3.5.2

References

https://github.com/libarchive/libarchive/issues/1565
https://github.com/libarchive/libarchive/commit/fba4f123c...
https://bugzilla.redhat.com/show_bug.cgi?id=2024245

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.