CVE-2020-27833

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image (.tar file) which contains symbolic links. The vulnerability is limited to the command `oc image extract`. If a symbolic link is first created pointing within the tarball, this allows further symbolic links to bypass the existing path check. This flaw allows the tarball to create links outside the tarball's parent directory, allowing for executables or configuration files to be overwritten, resulting in arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions up to and including openshift-clients-4.7.0-202104250659.p0.git.95881af are affected.

• CWE-20
• CWE-59

• https://access.redhat.com/security/cve/CVE-2020-27833Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1905945Issue Tracking, Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2020-27833Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1905945Issue Tracking, Vendor Advisory

Published

May 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27828There's a flaw in jasper's jpc encoder in versions prior to …7.8
• CVE-2020-27829A heap based buffer overflow in coders/tiff.c may result in …5.5
• CVE-2020-2783Vulnerability in the Oracle Outside In Technology product of…5.3
• CVE-2020-27830A vulnerability was found in Linux Kernel where in the spk_t…5.5
• CVE-2020-27831A flaw was found in Red Hat Quay, where it does not properly…4.3
• CVE-2020-27832A flaw was found in Red Hat Quay, where it has a persistent …9
• CVE-2020-27834Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-27835A use after free in the Linux kernel infiniband hfi1 driver …4.4
• CVE-2020-27836A flaw was found in cluster-ingress-operator. A change to ho…9.8
• CVE-2020-27837A flaw was found in GDM in versions prior to 3.38.2.1. A rac…6.4
• CVE-2020-27838A flaw was found in keycloak in versions prior to 13.0.0. Th…6.5
• CVE-2020-27839A flaw was found in ceph-dashboard. The JSON Web Token (JWT)…5.4