Fluid Attacks Database

Description

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	p7zip	>=0 <9.20.1~dfsg.1-4.2	9.20.1~dfsg.1-4.2
debian 12	p7zip	>=0 <9.20.1~dfsg.1-4.2	9.20.1~dfsg.1-4.2

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.