CyberRota Analysis
AI-GeneratedA vulnerability in the sos clean utility allows local attackers to exploit a path traversal issue during tar extraction, enabling arbitrary file creation or overwriting. By crafting a malicious tar archive, attackers can manipulate symlink and hardlink targets that are not properly validated, potentially compromising system integrity with root privileges. Organizations utilizing the sos package should prioritize patching this vulnerability to mitigate the risk of unauthorized file manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink targets are not properly validated. This enables the attacker to write files to arbitrary locations on the system with the privileges of the sos clean process, which often runs as root.