CyberRota Analysis
AI-GeneratedThe gpgtar utility in GnuPG versions prior to 2.5.19 is vulnerable to a file overwrite issue when extracting untrusted archives into existing directories containing symlinks. This flaw allows attackers to manipulate the extraction process, potentially leading to unauthorized file creation or overwriting outside the intended directory, constrained by the user's filesystem permissions. Users and organizations that utilize GnuPG for archive extraction, especially in environments where untrusted data is processed, should prioritize updating to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions. An archive extracted into a fresh empty directory does not have this risk.