CVE:CVE-2020-24654
CNNVD:CNNVD-202009-001
KDE Ark是KDE社区的一款图形文件压缩/解压缩实用程序。
KDE Ark 存在后置链接漏洞，该漏洞源于网络系统或产品未正确过滤表示非预期资源的链接或者快捷方式的文件名。攻击者可利用该漏洞访问非法的文件路径。
solution:Upgrade kde ark to a higher version than 20.08.1,and avoid the version (,20.08.1); Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,and avoid the version 16.04,18.04,20.04; Upgrade debian debian_linux to a higher version than 10.0,9.0,and avoid the version 10.0,9.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2