Most recent entries from all

BELL-CVE-2023-39804

Affected: Alpaquita:23: tar

certfr-2024-avi-0585 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2024-avi-0585

EUVD-2026-259180

fkie_cve-2023-39804

In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

GHSA-5pvw-wf9w-xx8v

In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

gsd-2023-39804

msrc_CVE-2023-39804 — In GNU tar before 1.35 mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

msrc_CVE-2023-39804

OESA-2023-1991 — tar security update

Affected: openEuler:22.03-LTS-SP2: tar

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fix(es): A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.(CVE-2023-39804)

openSUSE-SU-2024:13751-1 — tar-1.35-2.1 on GA media

tar-1.35-2.1 on GA media

SUSE-SU-2024:0070-2 — Security update for tar

Security update for tar

UBUNTU-CVE-2023-39804

Affected: Ubuntu:Pro:14.04:LTS: tar, Ubuntu:Pro:16.04:LTS: tar, Ubuntu:Pro:18.04:LTS: tar, Ubuntu:20.04:LTS: tar, Ubuntu:22.04:LTS: tar

In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

WID-SEC-W-2023-3093 — GNU tar: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GNU tar ausnutzen, um einen Denial of Service Angriff durchzuführen.