CVE-2023-52138: Path traversal via crafted cpio archives in Engrampa archivers
Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by default will follow stored symlinks while extracting and the Archiver will not check the symlink location, which leads to arbitrary file writes to unintended locations. When the victim extracts the archive, the attacker can craft a malicious cpio or ISO archive to achieve RCE on the target system. This vulnerability was fixed in commit 63d5dfa.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/engrampato a version that resolves this vulnerability.Fixed in 1.24.1-1+deb11u1Fixed in 1.26.0-1+deb12u2Fixed in 1.26.2-5Fixed in 1.28.2-1 - Upgrade
Upgrade
Engrampato a version that resolves this vulnerability.Patch commit 63d5dfa - Compensating control
Apply a workaround/mitigation that prevents unsafe extraction of crafted CPIO/ISO archives that can trigger path traversal and RCE (e.g., block or quarantine untrusted archives from being extracted).
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52138?
CVE-2023-52138 is considered a high severity vulnerability due to its potential for full Remote Command Execution.
How do I fix CVE-2023-52138?
To mitigate the risks associated with CVE-2023-52138, it is recommended to upgrade Engrampa to version 1.26.2 or later.
What type of vulnerability is CVE-2023-52138?
CVE-2023-52138 is classified as a Path Traversal vulnerability within the Engrampa archive manager.
Which software versions are affected by CVE-2023-52138?
Engrampa versions prior to 1.26.2 are affected by CVE-2023-52138.
Can CVE-2023-52138 be exploited remotely?
Yes, CVE-2023-52138 can be exploited to achieve Remote Command Execution, allowing attackers to run commands on the target system.