Bug 2487164 (CVE-2026-45491)
| Summary: | CVE-2026-45491 dotnet: .NET: Local file tampering via link following vulnerability | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2487589, 2487590, 2487591 | ||
| Bug Blocks: | |||
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:25111 https://access.redhat.com/errata/RHSA-2026:25111 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:25112 https://access.redhat.com/errata/RHSA-2026:25112 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:25115 https://access.redhat.com/errata/RHSA-2026:25115 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:25114 https://access.redhat.com/errata/RHSA-2026:25114 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:25110 https://access.redhat.com/errata/RHSA-2026:25110 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:25113 https://access.redhat.com/errata/RHSA-2026:25113 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:25220 https://access.redhat.com/errata/RHSA-2026:25220 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:25221 https://access.redhat.com/errata/RHSA-2026:25221 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:25222 https://access.redhat.com/errata/RHSA-2026:25222 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:28007 https://access.redhat.com/errata/RHSA-2026:28007 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:28009 https://access.redhat.com/errata/RHSA-2026:28009 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:28011 https://access.redhat.com/errata/RHSA-2026:28011 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:28227 https://access.redhat.com/errata/RHSA-2026:28227 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:28051 https://access.redhat.com/errata/RHSA-2026:28051 |
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.