Test ID:	1.3.6.1.4.1.25623.1.0.145251
Category:	Web application abuses
Title:	Drupal 7.x, 8.x, 9.x Archive_Tar library Vulnerability (SA-CORE-2021-001) - Linux
Summary:	Drupal is prone to a vulnerability in the Archive_Tar; library.
Description:	Summary: Drupal is prone to a vulnerability in the Archive_Tar library. Vulnerability Insight: The Drupal project uses the pear Archive_Tar library, which has released a security update that impacts Drupal. Exploits may be possible if Drupal is configured to allow .tar, .tar.gz, .bz2, or .tlz file uploads and processes them. Affected Software/OS: Drupal 7.x, 8.9.x and prior, 9.0.x and 9.1.x. Solution: Update to version 7.78, 8.9.13, 9.0.11, 9.1.3 or later. Disable uploads of .tar, .tar.gz, .bz2, or .tlz files to mitigate the vulnerability. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-36193 Debian Security Information: DSA-4894 (Google Search) https://www.debian.org/security/2021/dsa-4894 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKD5WEFA4WT6AVTMRAYBNXZNLWZHM7FH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FOZNK4FIIV7FSFCJNNFWMJZTTV7NFJV2/ https://security.gentoo.org/glsa/202101-23 https://github.com/pear/Archive_Tar/commit/cde460582ff389404b5b3ccb59374e9b389de916 https://lists.debian.org/debian-lts-announce/2021/01/msg00018.html https://lists.debian.org/debian-lts-announce/2021/04/msg00007.html
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.