CVE-2024-0406

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Apr 6, 2024
Source updated: Nov 20, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Mholt/archiver: path traversal vulnerability

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

archiver

Vendor: Unknown
Product: Unknown
Platforms: Unknown
Default status: unaffected
Package: archiver
Package collection: https://github.com/mholt/archiver

archiver · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
v3.0.0	`affected`	custom	*	Unavailable	None listed
v4.0.0	`unaffected`	custom	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.18

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.18
Platforms: Unknown
Default status: affected
Package: openshift4/oc-mirror-plugin-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat OpenShift Container Platform 4.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
v4.18.0-202503051333.p0.g22b273d.assembly.stream.el9	`unaffected`	rpm	*	Unavailable	None listed