https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:27:19.765432+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:48225 ALSA-2026:48225 — Important: perl:5.32 security update 2026-10-03T02:27:19.783954+00:00

Affected: AlmaLinux:8: perl, AlmaLinux:8: perl-Algorithm-Diff, AlmaLinux:8: perl-Archive-Tar, AlmaLinux:8: perl-Archive-Zip, AlmaLinux:8: perl-Attribute-Handlers, AlmaLinux:8: perl-AutoLoader, AlmaLinux:8: perl-AutoSplit, AlmaLinux:8: perl-B, AlmaLinux:8: perl-Benchmark, AlmaLinux:8: perl-CPAN and 212 more

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size (CVE-2026-9538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-9538 BELL-CVE-2026-9538 2026-10-03T02:27:19.784250+00:00

Affected: Alpaquita:23: perl, Alpaquita:25: perl, Alpaquita:stream: perl, BellSoft Hardened Containers:23: perl, BellSoft Hardened Containers:25: perl, BellSoft Hardened Containers:stream: perl

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0986 certfr-2026-avi-0986 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T02:27:19.784283+00:00 certfr-2026-avi-0986 https://cve.radiocsirt.org/vuln/euvd-2026-322379 EUVD-2026-322379 2026-10-03T02:27:19.784301+00:00 EUVD-2026-322379 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9538 fkie_cve-2026-9538 2026-10-03T02:27:19.784312+00:00

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.

_read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.

A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.

 https://cve.radiocsirt.org/vuln/ghsa-rrh7-4pj2-xxq8 GHSA-rrh7-4pj2-xxq8 2026-10-03T02:27:19.784337+00:00

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.

_read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.

A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-9538 msrc_CVE-2026-9538 — Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar head… 2026-10-03T02:27:19.784354+00:00 msrc_CVE-2026-9538 https://cve.radiocsirt.org/vuln/rhsa-2026:48225 RHSA-2026:48225 — Red Hat Security Advisory: perl:5.32 security update 2026-10-03T02:27:19.784369+00:00

perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

 https://cve.radiocsirt.org/vuln/rlsa-2026:48225 RLSA-2026:48225 — Important: perl:5.32 security update 2026-10-03T02:27:19.784385+00:00

Affected: Rocky Linux:8: perl, Rocky Linux:8: perl-Algorithm-Diff, Rocky Linux:8: perl-Archive-Zip, Rocky Linux:8: perl-autodie, Rocky Linux:8: perl-bignum, Rocky Linux:8: perl-Carp, Rocky Linux:8: perl-Compress-Bzip2, Rocky Linux:8: perl-Compress-Raw-Bzip2, Rocky Linux:8: perl-Compress-Raw-Lzma, Rocky Linux:8: perl-Compress-Raw-Zlib and 103 more

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size (CVE-2026-9538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9538 UBUNTU-CVE-2026-9538 2026-10-03T02:27:19.784595+00:00

Affected: Ubuntu:Pro:14.04:LTS: perl, Ubuntu:Pro:16.04:LTS: perl, Ubuntu:Pro:18.04:LTS: perl, Ubuntu:Pro:20.04:LTS: perl, Ubuntu:22.04:LTS: perl, Ubuntu:24.04:LTS: perl, Ubuntu:25.10: perl, Ubuntu:26.04:LTS: perl

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2588 WID-SEC-W-2026-2588 — Red Hat Enterprise Linux (perl-Archive-Tar, httplib2): Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T02:27:19.784626+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.