Description
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | aria2 | 1.9.3-1 | — |
| Debian 13 | aria2 | 1.9.3-1 | — |
| Debian 12 | aria2 | 1.9.3-1 | — |
| Debian 5.0 | aria2 | 0.14.0-1+lenny2 | DSA-2047-1 |
Advisories 1
- DSA-2047-1 aria2 - directory traversal Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20100513 Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability mailing-list
- 40142 vdb-entry
- FEDORA-2010-8915 vendor-advisory
- 39872 third-party-advisory
- ADV-2011-0116 vdb-entry
- http://downloads.sourceforge.net/project/aria2/stable/aria2-1.9.3/NEWS
- FEDORA-2010-8908 vendor-advisory
- FEDORA-2010-8905 vendor-advisory
- 64592 vdb-entry
- SUSE-SR:2010:017 vendor-advisory
- ADV-2010-1229 vdb-entry
- 42906 third-party-advisory
- SUSE-SR:2010:014 vendor-advisory
- 39529 third-party-advisory
- MDVSA-2010:106 vendor-advisory
- DSA-2047 vendor-advisory
- ADV-2010-1228 vdb-entry
- GLSA-201101-04 vendor-advisory
- http://secunia.com/secunia_research/2010-71/