CVE-2023-38346

creationtimestamp| type| source ---|---|--- 2023-09-26 11:00:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9089 2024-08-16 08:28:27+00:00| published-proof-of-concept| https://t.me/Rootsec2/1123 2026-07-29 12:02:26+00:00| seen| https://t.me/reverseame/3737 2026-07-30...

CVE-2023-38346

Wind River VxWorks 6.9 and 7 are affected by CVE-2023-38346 due to the tarExtract function handling TAR archives without proper path validation, which may allow directory traversal and unintended behavior. The issue arises from tarExtract processing files with relative or absolute paths and not c...