CVE-2007-4559

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 27.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-28 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

Affected products

Python: before 3.6.16; from 3.7.0 before 3.8.17; from 3.9.0 before 3.9.17; from 3.10.0 before 3.10.12; from 3.11.0 before 3.11.4 — fixed in 3.10.12, 3.11.4, 3.6.16, 3.8.17, 3.9.17

How to fix

Upgrade to a fixed version: Python 3.10.12, 3.11.4, 3.6.16, 3.8.17. Check the vendor advisory for mitigations.

References

http://mail.python.org/pipermail/python-dev/2007-August/074290.html
http://mail.python.org/pipermail/python-dev/2007-August/074292.html
http://secunia.com/advisories/26623
http://www.vupen.com/english/advisories/2007/3022
https://bugzilla.redhat.com/show_bug.cgi?id=263261
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/
https://security.gentoo.org/glsa/202309-06
http://mail.python.org/pipermail/python-dev/2007-August/074290.html
http://mail.python.org/pipermail/python-dev/2007-August/074292.html
http://secunia.com/advisories/26623

Get alerted when CVE-2007-4559 or the next vulnerability affects your stack