onyx --cves cve-2020-28949
CVE-2020-28949
- score
- <0.1
- cvss
- 7.8
- epss
- 84.6%
- published
- 2020-11-19
- kev added
- 2022-08-25
- first seen
Archive_Tar through 1.4.10 contains filename sanitization only to address phar attacks, letting other stream-wrapper attacks like file:// overwrite files succeed, exploit requires attacker to control archive contents.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Added to CISA KEV
- Tracked by Onyx
- Public PoC http://packetstormsecurity.com/files/161095/PEAR-Archive_Tar-Arbitrary-File-Write.html
Exploit availability
Weaknesses
NVD-CWE-noinfo
References 15
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4V35LBRM6HBCXBVCITKQ4UEBTXO2EG7B/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP/
- https://github.com/pear/Archive_Tar/issues/33
- https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/2024_Trustwave_Public_Sector_Threat_Landscape.pdf
- https://lists.debian.org/debian-lts-announce/2020/11/msg00045.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/
- https://security.gentoo.org/glsa/202101-23
- https://www.drupal.org/sa-core-2020-013
- https://info.securin.io/hubfs/Securin%20Ransomware%20Report%202023.pdf
- http://packetstormsecurity.com/files/161095/PEAR-Archive_Tar-Arbitrary-File-Write.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/
- https://www.debian.org/security/2020/dsa-4817
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-28949