PT-2019-19939 · Gnu +5 · Gnu Tar +5

🗓️ 24 Feb 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

GNU Tar pre 1.32 has a null pointer dereference in pax decode header from malformed headers

Reporter	Title	Published	Views	Family All 429
IBM Security Bulletins	Security Bulletin: A vulnerability in GNU Tar affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2019-9923)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	7 Jun 202501:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Mar 202418:03	–	ibm
IBM Security Bulletins	Security Bulletin: GNU Tar sparse_dump_region function denial of service affects IBM Spectrum LSF Application Center	8 Mar 201905:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in GNU Tar (CVE-2019-9923).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in tar	11 Nov 202516:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Hyper Converged Database	21 Jan 202610:51	–	ibm

Source	Link
bugs	www.bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-9923
cve	www.cve.org/CVERecord
osv	www.osv.dev/vulnerability/CVE-2019-9923
bdu	www.bdu.fstec.ru/vul/2021-02357
ubuntu	www.ubuntu.com/security/CVE-2018-20482
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2019-9923
git	www.git.savannah.gnu.org/cgit/tar.git/commit/
osv	www.osv.dev/vulnerability/MGASA-2019-0164
osv	www.osv.dev/vulnerability/SUSE-SU-2020:2806-1

06 Aug 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.14.7 - 7.5

CVSS 25.1

CVSS 37.5

EPSS0.18808

SSVC