Lucene search

K
cloudlinuxCloudLinuxCLSA-2023:1677791921
HistoryMar 02, 2023 - 9:18 p.m.

tar: Fix of CVE-2022-48303

2023-03-0221:18:41
repo.cloudlinux.com
55
fix
cve-2022-48303
check
end of field
leading byte
base-256
header value
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

18.9%

  • CVE-2022-48303: check for the end of field after leading byte (0x80 or 0xff)
    of base-256 encoded header value
OSVersionArchitecturePackageVersionFilename
Centos6x86_64tar< 1.23tar-1.23-15.el6_8.tuxcare.els1.src.rpm

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

18.9%