Read the docs
TI-2007-04413 Aliases CVE-2007-4559GHSA-gw9q-c7gh-j9vm

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the…

Priority HIGH 82CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 12 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.27095 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 14 advisoriesRed Hat: 12 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*before 3.6.16; 3.7.0 to before 3.8.17; 3.9.0 to before 3.9.17; 3.10.0 to before 3.10.12; 3.11.0 to before 3.11.4Vulnerablepython-pillow
  • cpe:2.3:a:python:python:*:*:*:*:*:*:*:* Versions before 3.6.16; 3.7.0 to before 3.8.17; 3.9.0 to before 3.9.17; 3.10.0 to before 3.10.12; 3.11.0 to before 3.11.4 Vulnerable ·python-pillow

Remediation

Red Hat 14 advisories

  • RHSA-2024:0587 Released 2024-01-30 · Red Hat rating Moderate
    python-pip security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) python3-pip-9.0.3-22.1.el8_8
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) platform-python-pip-9.0.3-22.1.el8_8, python-pip-9.0.3-22.1.el8_8, python3-pip-wheel-9.0.3-22.1.el8_8
  • RHSA-2024:0430 Released 2024-01-25 · Red Hat rating Moderate
    python3 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) platform-python-3.6.8-47.el8_6.4, platform-python-debug-3.6.8-47.el8_6.4, platform-python-devel-3.6.8-47.el8_6.4 +3
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) platform-python-3.6.8-47.el8_6.4, python3-3.6.8-47.el8_6.4, python3-libs-3.6.8-47.el8_6.4 +1
  • RHSA-2024:0374 Released 2024-01-23 · Red Hat rating Moderate
    python-pip security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) python3-pip-9.0.3-22.1.el8_6
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) platform-python-pip-9.0.3-22.1.el8_6, python-pip-9.0.3-22.1.el8_6, python3-pip-wheel-9.0.3-22.1.el8_6
Show 11 more Red Hat advisories
  • RHSA-2023:6914 Released 2023-11-14 · Red Hat rating Moderate
    python3.11-pip security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3.11-pip-22.3.1-4.el8, python3.11-pip-wheel-22.3.1-4.el8
  • RHSA-2023:7034 Released 2023-11-14 · Red Hat rating Moderate
    python39:3.9 and python39-devel:3.9 security update
    • Red Hat CodeReady Linux Builder (v. 8) Cython-0.29.21-5.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pybind11-2.7.1-1.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pytest-6.0.2-2.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9 +33
    • Red Hat Enterprise Linux AppStream (v. 8) PyYAML-5.4.1-1.module+el8.9.0+19644+d68f775d.src::python39:3.9, mod_wsgi-4.7.1-7.module+el8.9.0+19644+d68f775d.src::python39:3.9, numpy-1.19.4-3.module+el8.9.0+19644+d68f775d.src::python39:3.9 +47
  • RHSA-2023:7176 Released 2023-11-14 · Red Hat rating Moderate
    python-pip security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3-pip-9.0.3-23.el8
    • Red Hat Enterprise Linux BaseOS (v. 8) platform-python-pip-9.0.3-23.el8, python-pip-9.0.3-23.el8, python3-pip-wheel-9.0.3-23.el8
  • RHSA-2023:7050 Released 2023-11-14 · Red Hat rating Moderate
    python38:3.8 and python38-devel:3.8 security update
    • Red Hat CodeReady Linux Builder (v. 8) pytest-4.6.6-3.module+el8.9.0+19592+4b459c9b.src::python38-devel:3.8, python-atomicwrites-1.3.0-8.module+el8.9.0+19592+4b459c9b.src::python38-devel:3.8, python-attrs-19.3.0-3.module+el8.9.0+19592+4b459c9b.src::python38-devel:3.8 +15
    • Red Hat Enterprise Linux AppStream (v. 8) Cython-0.29.14-4.module+el8.9.0+19598+4a60c7b7.src::python38:3.8, PyYAML-5.4.1-1.module+el8.9.0+19598+4a60c7b7.src::python38:3.8, babel-2.7.0-11.module+el8.9.0+19598+4a60c7b7.src::python38:3.8 +47
  • RHSA-2023:7024 Released 2023-11-14 · Red Hat rating Moderate
    python3.11 security update
    • Red Hat CodeReady Linux Builder (v. 8) python3.11-3.11.5-1.el8_9, python3.11-debug-3.11.5-1.el8_9, python3.11-idle-3.11.5-1.el8_9 +2
    • Red Hat Enterprise Linux AppStream (v. 8) python3.11-3.11.5-1.el8_9, python3.11-devel-3.11.5-1.el8_9, python3.11-libs-3.11.5-1.el8_9 +2
  • RHSA-2023:7151 Released 2023-11-14 · Red Hat rating Moderate
    python3 security update
    • Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-56.el8_9, platform-python-debug-3.6.8-56.el8_9, platform-python-devel-3.6.8-56.el8_9 +3
    • Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-56.el8_9, python3-3.6.8-56.el8_9, python3-libs-3.6.8-56.el8_9 +1
  • RHSA-2023:6793 Released 2023-11-08 · Red Hat rating Important
    rh-python38-python security update
    • Red Hat Software Collections for RHEL Workstation(v. 7) rh-python38-python-3.8.18-2.el7, rh-python38-python-cryptography-2.8-6.el7, rh-python38-python-debug-3.8.18-2.el7 +14
    • Red Hat Software Collections for RHEL(v. 7) rh-python38-python-3.8.18-2.el7, rh-python38-python-cryptography-2.8-6.el7, rh-python38-python-debug-3.8.18-2.el7 +14
  • RHSA-2023:6659 Released 2023-11-07 · Red Hat rating Moderate
    python3.9 security update
    • Red Hat CodeReady Linux Builder (v. 9) python3-3.9.18-1.el9_3, python3-debug-3.9.18-1.el9_3, python3-idle-3.9.18-1.el9_3 +2
    • Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.18-1.el9_3, python3-devel-3.9.18-1.el9_3, python3-tkinter-3.9.18-1.el9_3
    • Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.18-1.el9_3, python3-libs-3.9.18-1.el9_3, python3.9-3.9.18-1.el9_3
  • RHSA-2023:6694 Released 2023-11-07 · Red Hat rating Moderate
    python-pip security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3-pip-21.2.3-7.el9
    • Red Hat Enterprise Linux BaseOS (v. 9) python-pip-21.2.3-7.el9, python3-pip-wheel-21.2.3-7.el9
  • RHSA-2023:6324 Released 2023-11-07 · Red Hat rating Moderate
    python3.11-pip security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3.11-pip-22.3.1-4.el9, python3.11-pip-wheel-22.3.1-4.el9
  • RHSA-2023:6494 Released 2023-11-07 · Red Hat rating Moderate
    python3.11 security update
    • Red Hat CodeReady Linux Builder (v. 9) python3.11-3.11.5-1.el9_3, python3.11-debug-3.11.5-1.el9_3, python3.11-idle-3.11.5-1.el9_3 +2
    • Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.5-1.el9_3, python3.11-devel-3.11.5-1.el9_3, python3.11-libs-3.11.5-1.el9_3 +1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2023:7024, RHSA-2023:7034, RHSA-2023:7050
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2023:6494, RHSA-2023:6659
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:6914, RHSA-2023:7024, RHSA-2023:7034, RHSA-2023:7050, RHSA-2023:7151, RHSA-2023:7176
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:6324, RHSA-2023:6494, RHSA-2023:6659, RHSA-2023:6694
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:0374, RHSA-2024:0430
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:0587
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2023:7151, RHSA-2023:7176
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2023:6659, RHSA-2023:6694
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:0374, RHSA-2024:0430
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:0587
Red Hat Software Collections for RHEL Workstation(v. 7)Fixed RHSA-2023:6793
Red Hat Software Collections for RHEL(v. 7)Fixed RHSA-2023:6793
Not affected: 3 products
  • Red Hat Enterprise Linux 8
  • Red Hat Software Collections for RHEL Workstation(v. 7)
  • Red Hat Software Collections for RHEL(v. 7)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-4559
  2. 2026-10-03 Alias added: GHSA-gw9q-c7gh-j9vm

References

Exploit 1

Advisory 5

Other 2

  • TI-2016-01993 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other… CVSS 3.1HIGH 7.5
  • TI-2022-24108 An XML External Entity (XXE) issue was discovered in Python through 3.9.1. CVSS 3.1CRITICAL 9.8
  • TI-2022-17508 The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and… CVSS 3.1CRITICAL 9.8
  • TI-2021-02254 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c… CVSS 3.1CRITICAL 9.8
  • TI-2014-00217 OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly… CVSS 3.1HIGH 7.4
  • TI-2024-07037 Quadratic complexity parsing cookies with backslashes CVSS 3.1HIGH 7.5
See all 139 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences