CVE-2025-62518: Access of Resource Using Incompatible Type

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...

SUSE CVE-2025-58183

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

EUVD-2005-0667

Malware in sbrugna...

EUVD-2011-1479

Malware in sbrugna...

EUVD-2020-20534

Malware in sbrugna...

EUVD-2004-1975

Malware in sbrugna...

EUVD-2015-1335

Malware in sbrugna...

EUVD-2017-1536

Malware in sbrugna...

EUVD-2020-23703

Malware in sbrugna...

EUVD-2019-0185

Malware in sbrugna...

EUVD-2019-14630

Malware in sbrugna...

EUVD-2024-54322

Malicious code in bioql PyPI...

EUVD-2023-46592

Malicious code in bioql PyPI...

EUVD-2023-54661

Malicious code in bioql PyPI...

EUVD-2023-46593

Malicious code in bioql PyPI...

EUVD-2023-46595

Malicious code in bioql PyPI...

EUVD-2023-46596

Malicious code in bioql PyPI...

EUVD-2023-46594

Malicious code in bioql PyPI...

Vulnerability of the header_pax_extension function in the rchive_read_support_format_tar.c component: 1844:8. The Libarchive library, which allows an attacker to trigger a service denial.

Vulnerability of the headerpaxextension function in the rchivereadsupportformattar.c component: Line 1844, character 8. The Libarchive compression library is related to the swapping of a null pointer. Exploitation of this vulnerability could allow an attacker to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2023-39804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c. CVE-2023-39804 Note that Nessus relies o...