CVE-2023-39804

2024-03-2704:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-39804

pax archive

application crash

xheader.c

unix

9.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

OSVersionArchitecturePackageVersionFilename
Debian12alltar< 1.34+dfsg-1.2+deb12u1tar_1.34+dfsg-1.2+deb12u1_all.deb
Debian11alltar< 1.34+dfsg-1+deb11u1tar_1.34+dfsg-1+deb11u1_all.deb
Debian999alltar< 1.34+dfsg-1.3tar_1.34+dfsg-1.3_all.deb
Debian13alltar< 1.34+dfsg-1.3tar_1.34+dfsg-1.3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	tar	< 1.34+dfsg-1.2+deb12u1	tar_1.34+dfsg-1.2+deb12u1_all.deb
Debian	11	all	tar	< 1.34+dfsg-1+deb11u1	tar_1.34+dfsg-1+deb11u1_all.deb
Debian	999	all	tar	< 1.34+dfsg-1.3	tar_1.34+dfsg-1.3_all.deb
Debian	13	all	tar	< 1.34+dfsg-1.3	tar_1.34+dfsg-1.3_all.deb