CVE-2018-12015
Fixed in a distro release EPSS 7%
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.
Products: canonical ubuntu_linux, debian_linux, perl, archive::tar_project archive::tar, apple mac_os_x, netapp data_ontap_edge, netapp oncommand_workflow_automation, netapp snap_creator_framework, netapp snapdrive
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | perl | 5.26.2-r1 |
| Alpine 3.11 | perl | 5.26.2-r1 |
| Alpine 3.12 | perl | 5.26.2-r1 |
| Alpine 3.13 | perl | 5.26.2-r1 |
| Alpine 3.14 | perl | 5.26.2-r1 |
| Alpine 3.15 | perl | 5.26.2-r1 |
| Alpine 3.16 | perl | 5.26.2-r1 |
| Alpine 3.17 | perl | 5.26.2-r1 |
| Alpine 3.18 | perl | 5.26.2-r1 |
| Alpine 3.19 | perl | 5.26.2-r1 |
| Alpine 3.20 | perl | 5.26.2-r1 |
| Alpine 3.21 | perl | 5.26.2-r1 |
| Alpine 3.22 | perl | 5.26.2-r1 |
| Alpine 3.23 | perl | 5.26.2-r1 |
| Alpine 3.24 | perl | 5.26.2-r1 |
| Alpine 3.5 | perl | 5.24.4-r1 |
| Alpine 3.6 | perl | 5.24.4-r1 |
| Alpine 3.7 | perl | 5.26.2-r1 |
| Alpine 3.8 | perl | 5.26.2-r1 |
| Alpine 3.9 | perl | 5.26.2-r1 |
| Amazon Linux 2 | perl-Archive-Tar | 1.92-3.amzn2 |
| Debian 12 | perl | 5.26.2-6 |
| Debian 13 | perl | 5.26.2-6 |
| Debian 14 | perl | 5.26.2-6 |
| Debian 8 | perl | 5.20.2-3+deb8u11 |
| Debian 9 | perl | 5.24.1-3+deb9u4 |
| Red Hat Enterprise Linux 7 | perl-Archive-Tar | 0:1.92-3.el7 |
| Red Hat hummingbird 1 | perl | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Attribute-Handlers | 0:1.03-524.1.hum1 |
| Red Hat hummingbird 1 | perl-AutoLoader | 0:5.74-524.1.hum1 |
| Red Hat hummingbird 1 | perl-AutoSplit | 0:5.74-524.1.hum1 |
| Red Hat hummingbird 1 | perl-B | 0:1.89-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Benchmark | 0:1.27-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Class-Struct | 0:0.68-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Config-Extensions | 0:0.03-524.1.hum1 |
| Red Hat hummingbird 1 | perl-DBM_Filter | 0:0.07-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Devel-Peek | 0:1.36-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Devel-SelfStubber | 0:1.06-524.1.hum1 |
| Red Hat hummingbird 1 | perl-DirHandle | 0:1.05-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Dumpvalue | 0:2.27-524.1.hum1 |
| Red Hat hummingbird 1 | perl-DynaLoader | 0:1.57-524.1.hum1 |
| Red Hat hummingbird 1 | perl-English | 0:1.11-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Errno | 0:1.38-524.1.hum1 |
| Red Hat hummingbird 1 | perl-ExtUtils-Constant | 0:0.25-524.1.hum1 |
| Red Hat hummingbird 1 | perl-ExtUtils-Embed | 0:1.35-524.1.hum1 |
| Red Hat hummingbird 1 | perl-ExtUtils-Miniperl | 0:1.14-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Fcntl | 0:1.20-524.1.hum1 |
| Red Hat hummingbird 1 | perl-File-Basename | 0:2.86-524.1.hum1 |
| Red Hat hummingbird 1 | perl-File-Compare | 0:1.100.800-524.1.hum1 |
| Red Hat hummingbird 1 | perl-File-Copy | 0:2.41-524.1.hum1 |
| Red Hat hummingbird 1 | perl-File-DosGlob | 0:1.12-524.1.hum1 |
| Red Hat hummingbird 1 | perl-File-Find | 0:1.44-524.1.hum1 |
| Red Hat hummingbird 1 | perl-File-stat | 0:1.14-524.1.hum1 |
| Red Hat hummingbird 1 | perl-FileCache | 0:1.10-524.1.hum1 |
| Red Hat hummingbird 1 | perl-FileHandle | 0:2.05-524.1.hum1 |
| Red Hat hummingbird 1 | perl-FindBin | 0:1.54-524.1.hum1 |
| Red Hat hummingbird 1 | perl-GDBM_File | 0:1.24-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Getopt-Std | 0:1.14-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Hash-Util | 0:0.32-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Hash-Util-FieldHash | 0:1.27-524.1.hum1 |
| Red Hat hummingbird 1 | perl-I18N-Collate | 0:1.02-524.1.hum1 |
| Red Hat hummingbird 1 | perl-I18N-LangTags | 0:0.45-524.1.hum1 |
| Red Hat hummingbird 1 | perl-I18N-Langinfo | 0:0.24-524.1.hum1 |
| Red Hat hummingbird 1 | perl-IO | 0:1.55-524.1.hum1 |
| Red Hat hummingbird 1 | perl-IPC-Open3 | 0:1.24-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Locale-Maketext-Simple | 0:0.21-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Math-Complex | 0:1.63-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Memoize | 0:1.17-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Module-Loaded | 0:0.08-524.1.hum1 |
| Red Hat hummingbird 1 | perl-NDBM_File | 0:1.18-524.1.hum1 |
| Red Hat hummingbird 1 | perl-NEXT | 0:0.69-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Net | 0:1.04-524.1.hum1 |
| Red Hat hummingbird 1 | perl-ODBM_File | 0:1.20-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Opcode | 0:1.69-524.1.hum1 |
| Red Hat hummingbird 1 | perl-POSIX | 0:2.23-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Pod-Functions | 0:1.14-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Pod-Html | 0:1.35-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Safe | 0:2.47-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Search-Dict | 0:1.08-524.1.hum1 |
| Red Hat hummingbird 1 | perl-SelectSaver | 0:1.02-524.1.hum1 |
| Red Hat hummingbird 1 | perl-SelfLoader | 0:1.28-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Symbol | 0:1.09-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Sys-Hostname | 0:1.25-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Term-Complete | 0:1.403-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Term-ReadLine | 0:1.17-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Test | 0:1.31-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Text-Abbrev | 0:1.02-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Thread | 0:3.06-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Thread-Semaphore | 0:2.13-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Tie | 0:4.6-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Tie-File | 0:1.10-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Tie-Memoize | 0:1.1-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Time | 0:1.04-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Time-Piece | 0:1.3600-524.1.hum1 |
| Red Hat hummingbird 1 | perl-Unicode-UCD | 0:0.81-524.1.hum1 |
| Red Hat hummingbird 1 | perl-User-pwent | 0:1.05-524.1.hum1 |
| Red Hat hummingbird 1 | perl-autouse | 0:1.11-524.1.hum1 |
| Red Hat hummingbird 1 | perl-base | 0:2.27-524.1.hum1 |
| Red Hat hummingbird 1 | perl-blib | 0:1.07-524.1.hum1 |
| Red Hat hummingbird 1 | perl-debugger | 0:1.60-524.1.hum1 |
| Red Hat hummingbird 1 | perl-deprecate | 0:0.04-524.1.hum1 |
| Red Hat hummingbird 1 | perl-devel | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-diagnostics | 0:1.40-524.1.hum1 |
| Red Hat hummingbird 1 | perl-doc | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-encoding-warnings | 0:0.14-524.1.hum1 |
| Red Hat hummingbird 1 | perl-fields | 0:2.27-524.1.hum1 |
| Red Hat hummingbird 1 | perl-filetest | 0:1.03-524.1.hum1 |
| Red Hat hummingbird 1 | perl-if | 0:0.61.000-524.1.hum1 |
| Red Hat hummingbird 1 | perl-interpreter | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-less | 0:0.03-524.1.hum1 |
| Red Hat hummingbird 1 | perl-lib | 0:0.65-524.1.hum1 |
| Red Hat hummingbird 1 | perl-libnetcfg | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-libs | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-locale | 0:1.13-524.1.hum1 |
| Red Hat hummingbird 1 | perl-macros | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-meta-notation | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-mro | 0:1.29-524.1.hum1 |
| Red Hat hummingbird 1 | perl-open | 0:1.13-524.1.hum1 |
| Red Hat hummingbird 1 | perl-overload | 0:1.40-524.1.hum1 |
| Red Hat hummingbird 1 | perl-overloading | 0:0.02-524.1.hum1 |
| Red Hat hummingbird 1 | perl-ph | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-sigtrap | 0:1.10-524.1.hum1 |
| Red Hat hummingbird 1 | perl-sort | 0:2.06-524.1.hum1 |
| Red Hat hummingbird 1 | perl-subs | 0:1.04-524.1.hum1 |
| Red Hat hummingbird 1 | perl-tests | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-utils | 0:5.42.2-524.1.hum1 |
| Red Hat hummingbird 1 | perl-vars | 0:1.05-524.1.hum1 |
| Red Hat hummingbird 1 | perl-vmsish | 0:1.04-524.1.hum1 |
| SUSE Enterprise Storage 4 | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | perl | 5.26.1-7.3.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | perl | 5.26.1-7.3.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | perl | 5.10.0-64.81.13.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | perl | 5.10.0-64.81.13.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | perl | 5.10.0-64.81.13.1 |
| SUSE Linux Enterprise Server 11 SP4 | perl | 5.10.0-64.81.13.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Server 12 SP3 | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Server 12-LTSS | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | perl | 5.10.0-64.81.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | perl | 5.18.2-12.14.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | perl | 5.10.0-64.81.13.1 |
| SUSE OpenStack Cloud 7 | perl | 5.18.2-12.14.1 |
| Ubuntu 14.04 LTS | perl | 5.18.2-2ubuntu1.6 |
| Ubuntu 16.04 LTS | perl | 5.22.1-9ubuntu0.5 |
| Ubuntu 18.04 LTS | perl | 5.26.1-6ubuntu0.1 |