CVE-2021-31566

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description The issue is related to an improper link resolution flaw that occurs when extracting an archive, potentially allowing an attacker to change modes, times, access control lists, and flags of a file outside of the archive. This could be exploited by a local attacker to gain more privileges in a system by providing a malicious archive to a victim user. The flaw is also associated with the tracking of symbolic links in the libarchive library, which could be exploited by creating a specially crafted link to a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.