Improper Link Resolution Flaw in libarchive Product by LibreSoftware

CVE-2021-31566

What is CVE-2021-31566?

The vulnerability stems from an improper link resolution issue present in the libarchive software, which can occur when a user attempts to extract files from an archive. This flaw allows a malicious actor to craft a harmful archive that, when extracted by an unsuspecting user, may lead to unauthorized changes in file modes, timestamps, access control lists, and other attributes of files located outside the archive. Consequently, a local attacker can exploit this vulnerability to escalate privileges on the system.

References