CVE-2021-38511: High severity Tar Project Tar Rust vulnerability
Published Aug 10, 2021
·Updated
An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.
Affected Software
1 affected component
Tar Project Tar Rust<0.4.36
Event History
Aug 10, 2021
CVE Published
via MITRE·10:12 PM
Data Sourced
via MITRE·10:12 PM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-38511?
CVE-2021-38511 is a vulnerability in the tar crate for Rust, allowing arbitrary directory creation through symlink traversal during extraction.
2
What is the severity of CVE-2021-38511?
The severity of CVE-2021-38511 is high, with a CVSS score of 7.5.
3
How does CVE-2021-38511 affect the Tar Project Tar software?
CVE-2021-38511 affects the Tar Project Tar software version up to, but excluding, 0.4.36.
4
How can I fix CVE-2021-38511?
To fix CVE-2021-38511, update the tar crate for Rust to version 0.4.36 or later.
5
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2021-38511?
The Common Weakness Enumeration (CWE) ID associated with CVE-2021-38511 is 59.