Lucene search

K
amazonAmazonALAS-2023-1755
HistoryMay 25, 2023 - 5:41 p.m.

Medium: tar

2023-05-2517:41:00
alas.aws.amazon.com
5

0.011 Low

EPSS

Percentile

84.3%

Issue Overview:

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers. (CVE-2019-9923)

Affected Packages:

tar

Issue Correction:
Run yum update tar to update your system.

New Packages:

i686:  
    tar-1.26-31.24.amzn1.i686  
    tar-debuginfo-1.26-31.24.amzn1.i686  
  
src:  
    tar-1.26-31.24.amzn1.src  
  
x86_64:  
    tar-debuginfo-1.26-31.24.amzn1.x86_64  
    tar-1.26-31.24.amzn1.x86_64  

Additional References

Red Hat: CVE-2019-9923

Mitre: CVE-2019-9923