TI-2018-08610 Aliases CVE-2018-12015 GHSA-44r9-882w-xw5m

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a…

MEDIUM 43CWE-59Published 2018-06-07 · Updated 2024-08-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · None
Fix status: Partial Red Hat: 5 fixed, 3 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.

Summary

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.

Why it matters now

EPSS 0.0731 94th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Partial Red Hat: 2 advisoriesRed Hat: 5 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPE	Versions	Role	Vendor
cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::	12.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::	14.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::	16.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:17.10:::::::*	17.10	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::	18.04	Vulnerable	Canonical
cpe:2.3:o:debian:debian_linux:8.0:::::::*	8.0	Vulnerable	Debian
cpe:2.3:o:debian:debian_linux:9.0:::::::*	9.0	Vulnerable	Debian
cpe:2.3:a:perl:perl::::::::	up to 5.26.2	Vulnerable	Perl
cpe:2.3:a:archive\:\:tar_project:archive\:\:tar::::::perl::*	tar_project archive\	Vulnerable	BINGOS
cpe:2.3:o:apple:mac_os_x::::::::	before 10.14.4	Vulnerable	Apple

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* Versions 12.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* Versions 17.10 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:* Versions up to 5.26.2 Vulnerable ·Perl
cpe:2.3:a:archive\:\:tar_project:archive\:\:tar:*:*:*:*:*:perl:*:* Versions tar_project archive\ Vulnerable ·BINGOS
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions before 10.14.4 Vulnerable ·Apple

Show 4 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:netapp:data_ontap_edge:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:netapp:snap_creator_framework:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:netapp:snapdrive:-:::::unix::	not specified by NVD	Vulnerable	NetApp

cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

Red Hat 2 advisories

RHSA-2026:7604 Released 2026-04-10 · Red Hat rating Important
Red Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images perl-5.42.2-524.1.hum1@aarch64, perl-5.42.2-524.1.hum1@src, perl-5.42.2-524.1.hum1@x86_64 +47
RHSA-2019:2097 Released 2019-08-06 · Red Hat rating Moderate
perl-Archive-Tar security update
- Red Hat Enterprise Linux Client (v. 7) perl-Archive-Tar-1.92-3.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) perl-Archive-Tar-1.92-3.el7
- Red Hat Enterprise Linux Server (v. 7) perl-Archive-Tar-1.92-3.el7
- Red Hat Enterprise Linux Workstation (v. 7) perl-Archive-Tar-1.92-3.el7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 5	Affected	No fix planned: Will not fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Will not fix
Red Hat Software Collections	Affected	No fix planned: Will not fix
Red Hat Enterprise Linux Client (v. 7)	Fixed	RHSA-2019:2097
Red Hat Enterprise Linux ComputeNode (v. 7)	Fixed	RHSA-2019:2097
Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2019:2097
Red Hat Enterprise Linux Workstation (v. 7)	Fixed	RHSA-2019:2097
Red Hat Hardened Images	Fixed	RHSA-2026:7604

Not affected: 2 products

Red Hat Enterprise Linux 8
Red Hat Software Collections

Timeline

2026-10-02 Threatist record created from CVE-2018-12015
2026-10-03 Alias added: GHSA-44r9-882w-xw5m

References

Exploit 1

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900834

Patch 1

https://security.netapp.com/advisory/ntap-20180927-0001/

Advisory 7

Other 1

https://www.oracle.com/security-alerts/cpujul2020.html

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences