PT-2019-19796 · Arch Linux · Pacman

Publicado

2019-03-11

·

Atualizado

2020-11-09

·

CVE-2019-9686

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions pacman versions prior to 5.1.3
Description The issue allows directory traversal when installing a remote package via a specified URL, due to an unsanitized file name received from a Content-Disposition header. This can lead to arbitrary root code execution, bypassing package signature checking. A malicious server or a network MitM can send a Content-Disposition header to make pacman place the file anywhere in the filesystem.
Recommendations For versions prior to 5.1.3, update to version 5.1.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the -U option with URLs to minimize the risk of exploitation. Restrict access to the curl download internal function in lib/libalpm/dload.c to minimize the risk of exploitation.

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-9686

Produtos afetados

Pacman