Advisories ยป MGASA-2019-0005

Updated plexus-archiver packages fix security vulnerability

Publication date: 05 Jan 2019
Modification date: 05 Jan 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-1002200

Description

A path traversal vulnerability has been discovered in plexus-archiver
when extracting a carefully crafted zip file which holds path traversal
file names. A remote attacker could use this vulnerability to write
files outside the target directory and overwrite existing files with
malicious code or vulnerable configurations (CVE-2018-1002200).

References

SRPMS

6/core