K78284681 : Python tarfile library vulnerability CVE-2019-20907

Security Advisory Description

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation. (CVE-2019-20907)

Impact

A user-created custom Python script utilizing the Python tarfile library may enter an infinite loop, consuming resources and causing a denial of service. The Python tarfile library is not used by any standard F5-supplied software.