CVE-2023-38346

creationtimestamp| type| source ---|---|--- 2023-09-26 11:00:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9089 2024-08-16 08:28:27+00:00| published-proof-of-concept| https://t.me/Rootsec2/1123...

CVE-2023-38346

Wind River VxWorks 6.9 and 7 are affected by CVE-2023-38346 due to the tarExtract function handling TAR archives without proper path validation, which may allow directory traversal and unintended behavior. The issue arises from tarExtract processing files with relative or absolute paths and not c...