PT-2023-5463 · Wind River · Vxworks
Martin Schobert
+1
·
Publicado
2023-09-19
·
Atualizado
2024-09-25
·
CVE-2023-38346
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Wind River VxWorks versions 6.9 through 7
Description
An issue was discovered in the
tarExtract function, which implements TAR file extraction and processes files within an archive that have relative or absolute file paths. This could lead to unexpected and undocumented behavior, resulting in a directory traversal and associated unexpected behavior. A developer using the tarExtract function may expect that the function will strip leading slashes from absolute paths or stop processing when encountering relative paths that are outside of the extraction path, unless otherwise forced. The vulnerability may allow a remote attacker to execute arbitrary commands by injecting a malicious tar file.Recommendations
For Wind River VxWorks versions 6.9 through 7, consider disabling the
tarExtract function until a patch is available to prevent potential directory traversal attacks. Restrict access to the tarExtract function to minimize the risk of exploitation. Avoid using the tarExtract function with untrusted tar files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Vxworks