CVE-2019-16680 PUBLISHED

An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.

EPSS 1.79% · 82.6th percentile

Risk Scores

EPSS Score
1.79%
82.6th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfile-roller3.28.0-1ubuntu1, 0, 3.26.1-0ubuntu1
Ubuntu:16.04:LTSfile-roller0, 3.16.4-1ubuntu3, 3.16.5-0ubuntu1

Timeline

References

Open in Interactive Console →