Description (CNA)
A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected v3.0.0 before *; unaffected v4.0.0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202503051333.p0.g22b273d.assembly.stream.el9 before * |
| Red Hat / Red Hat Advanced Cluster Security 3 | affected |
| Red Hat / Red Hat Advanced Cluster Security 3 | affected |
| Red Hat / Red Hat Advanced Cluster Security 3 | affected |
| Red Hat / Red Hat Advanced Cluster Security 4 | unaffected |
| Red Hat / Red Hat Advanced Cluster Security 4 | unaffected |
| Red Hat / Red Hat Advanced Cluster Security 4 | unaffected |
CWE
CWE-22
References
- https://access.redhat.com/errata/RHSA-2025:2449
- https://access.redhat.com/security/cve/CVE-2024-0406
- https://bugzilla.redhat.com/show_bug.cgi?id=2257749
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.