Fluid Attacks Database

Description

7-Zip before 25.01 does not always properly handle symbolic links during extraction.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	7zip	=22.01+dfsg-10~exp1 \|\| =22.01+dfsg-8 \|\| =22.01+dfsg-8+deb12u1 \|\| =22.01+dfsg-9 \|\| >=0 <22.01+really25.01+dfsg-0+deb12u1	22.01+really25.01+dfsg-0+deb12u1
debian 13	7zip	=24.09+dfsg-8 \|\| =25.00+dfsg-1 \|\| =25.01+dfsg-1~deb13u1~bpo12+1 \|\| >=0 <25.01+dfsg-1~deb13u1	25.01+dfsg-1~deb13u1
debian 14	7zip	=24.09+dfsg-8 \|\| =25.00+dfsg-1 \|\| =25.01+dfsg-1~deb13u1 \|\| =25.01+dfsg-1~deb13u1~bpo12+1 \|\| =25.01+dfsg-1~deb13u2 \|\| >=0 <25.01+dfsg-1	25.01+dfsg-1
debian 12	p7zip	=16.02+dfsg-8 \|\| >=0 <16.02+really25.01+dfsg-0+deb12u1	16.02+really25.01+dfsg-0+deb12u1
debian 13	p7zip	>=0 <16.02+transitional.1	16.02+transitional.1

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.