{"id":"CVE-2021-31566","aliases":["ALPINE-CVE-2021-31566","ALSA-2022:0892","CLSA-2026-1777307149","CLSA-2026-1777544831","CLSA-2026-1787908647","CLSA-2026-1792818643","DEBIAN-CVE-2021-31566","DLA-2987-1","DLA-3202-1","EUVD-2021-18460","GHSA-mg62-fpgc-6hjj","JLSEC-2025-236","MGASA-2022-0060","OESA-2022-1494","RHSA-2022:0892","RLSA-2022:0892","SUSE-SU-2022:3935-1","SUSE-SU-2022:3936-1","UBUNTU-CVE-2021-31566","USN-5291-1","openSUSE-SU-2024:11894-1"],"status":"published","title":"An improper link resolution flaw can occur while extracting an archive leading to changing modes,...","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0039,"percentile":0.3363,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2021-12-24T00:00:00Z","modified":"2026-11-04T07:08:15Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"libarchive","fixed_in":["3.5.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libarchive","fixed_in":["3.5.3-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"bsdcpio","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"bsdtar","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libarchive","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libarchive-devel","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bsdcpio","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bsdtar","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libarchive","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libarchive-devel","fixed_in":["3.1.2-14.el7_7.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libarchive","fixed_in":["3.5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libarchive","fixed_in":["3.5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libarchive","fixed_in":["3.5.2-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibArchive_jll","fixed_in":["3.5.2+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libarchive","fixed_in":["3.4.2-150200.4.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"libarchive","fixed_in":["3.4.2-150200.4.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libarchive","fixed_in":["3.4.2-150200.4.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libarchive","fixed_in":["3.5.1-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libarchive","fixed_in":["3.5.1-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"libarchive","fixed_in":["3.5.1-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libarchive","fixed_in":["3.5.1-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libarchive","fixed_in":["3.4.0-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bsdtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libarchive-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"bsdcpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"bsdtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libarchive-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bsdcpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bsdtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libarchive-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-14.el7_7.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bsdcpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.1ubuntu0.7+tuxcare.els1"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bsdtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.1ubuntu0.7+tuxcare.els1"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libarchive-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.1ubuntu0.7+tuxcare.els1"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libarchive-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.1ubuntu0.7+tuxcare.els1"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libarchive13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.1ubuntu0.7+tuxcare.els1"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.3-7.el6_8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libarchive-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.3-7.el6_8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-2+deb9u3"}]}],"versions":["3.2.2-2","3.2.2-2+deb9u1","3.2.2-2+deb9u2"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-4+deb10u2"}]}],"versions":["3.3.3-4","3.3.3-4+deb10u1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"LibArchive_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.5.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-4.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-4.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-4.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdcat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdcpio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdtar-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libarchive-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libarchive-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bsdcat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bsdcpio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bsdtar-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libarchive-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libarchive-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libarchive-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-3.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.4.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-5ubuntu1","3.1.2-7ubuntu1","3.1.2-7ubuntu2","3.1.2-7ubuntu2.1","3.1.2-7ubuntu2.2","3.1.2-7ubuntu2.3","3.1.2-7ubuntu2.4","3.1.2-7ubuntu2.6","3.1.2-7ubuntu2.7","3.1.2-7ubuntu2.8","3.1.2-7ubuntu2.8+esm1","3.1.2-7ubuntu2.8+esm3","3.1.2-7ubuntu2.8+esm4","3.1.2-7ubuntu2.8+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-11build1","3.1.2-11ubuntu0.16.04.1","3.1.2-11ubuntu0.16.04.2","3.1.2-11ubuntu0.16.04.3","3.1.2-11ubuntu0.16.04.4","3.1.2-11ubuntu0.16.04.5","3.1.2-11ubuntu0.16.04.6","3.1.2-11ubuntu0.16.04.7","3.1.2-11ubuntu0.16.04.8","3.1.2-11ubuntu0.16.04.8+esm1","3.1.2-11ubuntu0.16.04.8+esm2","3.1.2-11ubuntu0.16.04.8+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.2-3.1","3.2.2-3.1ubuntu0.1","3.2.2-3.1ubuntu0.2","3.2.2-3.1ubuntu0.3","3.2.2-3.1ubuntu0.4","3.2.2-3.1ubuntu0.5","3.2.2-3.1ubuntu0.6","3.2.2-3.1ubuntu0.7","3.2.2-3.1ubuntu0.7+esm1","3.2.2-3.1ubuntu0.7+esm2","3.2.2-3.1ubuntu0.7+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2ubuntu1.1"}]}],"versions":["3.4.0-1","3.4.0-1build1","3.4.0-1ubuntu2","3.4.0-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2ubuntu1.1"}]}],"versions":["3.4.0-1","3.4.0-1build1","3.4.0-1ubuntu2","3.4.0-2ubuntu1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bsdtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-1.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libarchive","product":"libarchive"},{"vendor":"redhat","product":"codeready_linux_builder"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"splunk","product":"universal_forwarder"}],"references":[{"url":"https://github.com/libarchive/libarchive/issues/1566","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/libarchive/libarchive/commit/b41daecb5ccb4c8e3b2c53fd6147109fc12c3043","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024237","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31566","tags":["x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00030.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31566","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mg62-fpgc-6hjj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-31566","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-0892.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-23177","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-31566","tags":["report"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777307149.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777544831.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787908647.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5121","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792818643.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-31566","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0060.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30023","tags":["report"]},{"url":"https://github.com/libarchive/libarchive/releases/tag/v3.5.3","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1494","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0892","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024245","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0892.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23177","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31566","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0892","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223935-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192426","tags":["report"]},{"url":"https://bugzilla.suse.com/1192427","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31566","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223936-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-31566","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5291-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-23177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-36976","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36976","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-31566","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2022-08-23T00:00:00Z","modified":"2026-11-02T18:02:14.581Z","cwes":["CWE-59"],"updated_at":"2026-11-02T19:02:29.283836Z"}],"euvd":[{"id":"EUVD-2021-18460","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2022-08-23T00:00:00Z","modified":"2026-11-02T18:02:14Z","updated_at":"2026-11-03T05:08:39.228431Z"}],"ghsa":[{"id":"GHSA-mg62-fpgc-6hjj","title":"An improper link resolution flaw can occur while extracting an archive leading to changing modes,...","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2022-08-24T00:00:29Z","modified":"2023-02-02T05:03:54Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:51:44.834559Z"}],"nvd":[{"id":"CVE-2021-31566","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2022-08-23T16:15:09.337Z","modified":"2026-11-02T18:18:33.52Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T20:51:29.040079Z"}],"osv":[{"id":"ALPINE-CVE-2021-31566","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2022-08-23T16:15:09.337Z","modified":"2026-10-23T17:17:56.184699562Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"CVE-2021-31566","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2022-08-23T16:15:09.337Z","modified":"2026-11-04T07:08:15.641977757Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T07:32:23.735279Z"},{"id":"DEBIAN-CVE-2021-31566","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2022-08-23T16:15:09.337Z","modified":"2026-11-03T09:47:27.785495949Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T10:27:58.933618Z"},{"id":"JLSEC-2025-236","title":"An improper link resolution flaw can occur while extracting an archive leading to changing modes,...","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2025-11-25T22:03:17.636Z","modified":"2026-07-23T22:30:12.481866458Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-1494","title":"libarchive security update","description":"is an open-source BSD-licensed C programming library that  provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution  also includes bsdtar and bsdcpio, full-featured implementations of  tar and cpio that use .\r\n\r\nSecurity Fix(es):\r\n\r\nIncorrect link resolution flaws can occur when extracting archives, resulting in changes to the mode, time, access control list, and flags of files outside the archive. An attacker could deliver malicious archives to victim users, triggering this vulnerability when they attempt to extract the archives. A local attacker could exploit this vulnerability to gain additional privileges on the system.(CVE-2021-31566)\r\n\r\nIncorrect link resolution flaws when using ACLs to extract symbolic links can lead to changes to the access control list (ACL) of the link target. An attacker could deliver malicious archives to victim users, triggering this vulnerability when they attempt to extract the archives. A local attacker could exploit this vulnerability to change the ACL of a file on the system and gain more permissions.(CVE-2021-23177)","status":"published","published":"2022-01-22T11:04:46Z","modified":"2026-08-18T01:16:23.296060429Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2022:0892","title":"Red Hat Security Advisory: libarchive security update","status":"published","published":"2024-09-16T07:06:03Z","modified":"2026-06-26T12:22:17.931707128Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2022:0892","title":"Moderate: libarchive security update","description":"The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: extracting a symlink with ACLs modifies ACLs of target (CVE-2021-23177)\n\n* libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive (CVE-2021-31566)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-15T09:11:33Z","modified":"2026-02-05T01:30:08.79964Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-31566","description":"An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.","status":"published","published":"2021-12-24T00:00:00Z","modified":"2026-05-21T18:05:11.477182175Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"ALSA-2022:0892","title":"Moderate: libarchive security update","description":"The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: extracting a symlink with ACLs modifies ACLs of target (CVE-2021-23177)\n\n* libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive (CVE-2021-31566)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-15T09:11:33Z","modified":"2026-10-29T11:01:12.906690851Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1777307149","title":"libarchive: Fix of CVE-2021-31566","description":"- CVE-2021-31566: extend backport with upstream 8a1bd5c and ede459d2 to close\n  the trailing-slash variant of the fixup-list symlink-follow attack","status":"published","published":"2026-04-27T16:25:54Z","modified":"2026-06-01T00:33:27.158417975Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777544831","title":"libarchive: Fix of CVE-2021-31566","description":"- CVE-2021-31566: extend backport with upstream 8a1bd5c and ede459d2 to close\n  the trailing-slash variant of the fixup-list symlink-follow attack","status":"published","published":"2026-05-02T01:13:19Z","modified":"2026-06-01T00:33:18.732554029Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1787908647","title":"Fix of 8 CVEs","description":"   * SECURITY UPDATE: ACLs applied to a symbolic link modified the link\n     target instead\n     - debian/patches/CVE-2021-23177.patch: ACLs applied to a symbolic\n       link modified the link target instead\n     - CVE-2021-23177\n   * SECURITY UPDATE: symbolic links followed when changing modes, times,\n     ACLs and flags while extracting an archive\n     - debian/patches/CVE-2021-31566.patch: symbolic links followed when\n       changing modes, times, ACLs and flags while extracting an archive\n     - CVE-2021-31566\n   * SECURITY UPDATE: NULL pointer dereference when calloc() fails while\n     allocating a write filter\n     - debian/patches/CVE-2022-36227.patch: NULL pointer dereference when\n       calloc() fails while allocating a write filter\n     - CVE-2022-36227\n   * SECURITY UPDATE: integer overflow in the RAR4 reader allowing an\n     oversized memcpy in copy_from_lzss_window()\n     - debian/patches/CVE-2024-20696.patch: integer overflow in the RAR4\n       reader allowing an oversized memcpy in copy_from_lzss_window()\n     - CVE-2024-20696\n   * SECURITY UPDATE: LZSS window size mismatch after a PPMd block in the\n     RAR4 reader allowing an out-of-bounds read\n     - debian/patches/CVE-2026-4424.patch: LZSS window size mismatch\n       after a PPMd block in the RAR4 reader allowing an out-of-bounds\n       read\n     - CVE-2026-4424\n   * SECURITY UPDATE: unvalidated zisofs block size exponent in the ISO9660\n     Rock Ridge ZF parser\n     - debian/patches/CVE-2026-5121.patch: unvalidated zisofs block size\n       exponent in the ISO9660 Rock Ridge ZF parser\n     - CVE-2026-5121\n   * SECURITY UPDATE: double free in the RAR4 reader with over 4 billion\n     nodes\n     - debian/patches/CVE-2025-5914.patch: double free in the RAR4 reader\n       with over 4 billion nodes\n     - CVE-2025-5914\n   * SECURITY UPDATE: unchecked strftime() return and localtime() NULL\n     dereference in the bsdtar verbose listing\n     - debian/patches/CVE-2025-25724.patch: check the strftime() result so a\n       custom locale whose expansion exceeds the 100-byte buffer cannot leave\n       stale content in it, and guard localtime() returning NULL; backports\n       upstream c9bc934e and ecce4674\n     - CVE-2025-25724\n   * Guard the RAR seek cursor before the previous-block lookup\n     - debian/patches/rar-guard-seek-cursor.patch: reject a zero cursor in\n       archive_read_format_rar_seek_data() before reading dbo[cursor - 1],\n       which would otherwise underflow; backports upstream e548c994\n   * Check the ISO9660 ZF entry length before reading its data bytes\n     - debian/patches/iso9660-zf-length-check.patch: test data_length before\n       data[0]/data[1] in parse_rockridge_ZF1(), so a zero-length ZF entry\n       cannot be read past the SUSP region bound; backports upstream a9a73c0e","status":"published","published":"2026-08-28T09:17:42Z","modified":"2026-10-26T09:43:54.435048564Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792818643","title":"libarchive: Fix of 2 CVEs","description":"- CVE-2021-23177: fix extraction of ACLs to the symlink target instead of the link\n- CVE-2021-31566: do not follow symlinks when fixing up permissions and file flags\n- CVE-2026-5121: validate pz_log2_bs in the iso9660 zisofs reader","status":"published","published":"2026-10-24T05:10:55Z","modified":"2026-10-26T09:31:53.775116996Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"DLA-2987-1","title":"libarchive - security update","status":"published","published":"2022-04-30T00:00:00Z","modified":"2026-03-09T01:19:07.80559Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3202-1","title":"libarchive - security update","status":"published","published":"2022-11-22T00:00:00Z","modified":"2026-03-09T01:21:06.828722Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2022-0060","title":"Updated libarchive packages fix security vulnerability","description":"Processing fixup entries may follow symbolic links. (CVE-2021-31566)\n\nlibarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called\nfrom do_uncompress_block and process_block). (CVE-2021-36976)\n","status":"published","published":"2022-02-12T17:31:35Z","modified":"2026-04-16T04:41:02.618303577Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11894-1","title":"bsdtar-3.6.0-1.1 on GA media","description":"These are all security issues fixed in the bsdtar-3.6.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:38:37.477192Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:3935-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n  - CVE-2021-31566: Fixed incorrect usage of file flags (bsc#1192426).\n  - Fixed issues where postprocessing alters symlink targets instead of actual file (bsc#1192427).\n","status":"published","published":"2022-11-10T12:35:59Z","modified":"2026-02-04T04:20:33.863442Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3936-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n  - CVE-2021-31566: Fixed vulnerability where libarchive modifies file flags of symlink target (bsc#1192426)\n  - Fixed issue where processing fixup entries may follow symbolic links (bsc#1192427).\n","status":"published","published":"2022-11-10T12:36:22Z","modified":"2026-02-04T02:54:16.926012Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5291-1","title":"libarchive vulnerabilities","description":"It was discovered that libarchive incorrectly handled symlinks. If a\nuser or automated system were tricked into processing a specially crafted\narchive, an attacker could possibly use this issue to change modes, times,\nACLs, and flags on arbitrary files. (CVE-2021-23177, CVE-2021-31566)\n\nIt was discovered that libarchive incorrectly handled certain RAR archives.\nIf a user or automated system were tricked into processing a specially\ncrafted RAR archive, an attacker could use this issue to cause libarchive\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2021-36976)\n","status":"published","published":"2022-02-17T13:54:10Z","modified":"2026-04-22T10:21:26.157013Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}