Lucene search
+L

6193 matches found

RedHat Linux
RedHat Linux
added 2025/06/30 1:43 p.m.10 views

python: cpython: Arbitrary writes via tarfile realpath overflow

A flaw was found in the CPython tarfile module. This vulnerability allows arbitrary filesystem writes outside the extraction directory via extracting untrusted tar archives using the TarFile.extractall or TarFile.extract methods with the extraction filter parameter set to "data" or "tar"...

9.4CVSS6.7AI score0.01376EPSS
SaveExploits11References10
Huntr
Huntr
added 2025/06/30 10:21 a.m.33 views

Path traversal, lead to remote code execution

Description clearml's safeextract is actually ​​NOT secure​​. It fails to properly handle symbolic links and hard links. When these links point to files ​​outside the TAR archive​​, it can lead to ​​arbitrary file writes​​, potentially resulting in ​​remote code execution​​. Due to a change in th...

9.8CVSS6.8AI score0.27095EPSS
SaveExploits3
Huntr
Huntr
added 2025/06/30 9:00 a.m.12 views

Path traversal, lead to remote code execution

Description In zenml's PathMaterializer class, the load function uses ispathwithindirectory to validate files during data.tar.gz extraction. While this prevents path traversal vulnerabilities, it fails to effectively detect symbolic and hard links. with tarfile.openarchivepathlocal, "r:gz" as tar...

7.8CVSS6.5AI score0.00334EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/06/30 12:00 a.m.4 views

EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2025-1690)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or...

7.8CVSS5.8AI score0.0036EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/06/30 12:00 a.m.5 views

EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2025-1705)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or...

7.8CVSS5.8AI score0.0036EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/06/24 6:58 a.m.20 views

libarchive: Buffer Overflow vulnerability in libarchive

A flaw was found in the libarchive package. Affected versions of libarchive do not check a strftime return value, which can lead to a denial of service or unspecified other impacts via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be...

7.8CVSS7.2AI score0.0036EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2025/06/24 1:13 a.m.5 views

libarchive: Buffer Overflow vulnerability in libarchive

A flaw was found in the libarchive package. Affected versions of libarchive do not check a strftime return value, which can lead to a denial of service or unspecified other impacts via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be...

7.8CVSS7.2AI score0.0036EPSS
SaveExploits1References7
OSV
OSV
added 2025/06/24 12:00 a.m.8 views

ALSA-2025:9420 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

7.8CVSS3.9AI score0.0036EPSS
SaveExploits1References4
OSV
OSV
added 2025/06/24 12:00 a.m.8 views

ALSA-2025:9431 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

7.8CVSS3.9AI score0.0036EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2025/06/24 12:00 a.m.13 views

Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

7.8CVSS4.1AI score0.0036EPSS
SaveExploits1References4
Amazon
Amazon
added 2025/06/23 12:00 a.m.16 views

Important: python3.9

Issue Overview: Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using...

9.4CVSS8.1AI score0.01376EPSS
SaveExploits14
Amazon
Amazon
added 2025/06/23 12:00 a.m.15 views

Important: python3.12

Issue Overview: Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using...

9.4CVSS8.1AI score0.01376EPSS
SaveExploits14
SUSE Linux
SUSE Linux
added 2025/06/20 12:42 p.m.7 views

Security update for python39

This update for python39 fixes the following issues: python39 was updated from version 3.9.21 to version 3.9.23: Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS bsc1243273 CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517:...

8.4CVSS6.1AI score0.01376EPSS
SaveExploits14References24
Tenable Nessus
Tenable Nessus
added 2025/06/20 12:00 a.m.8 views

Ubuntu 24.04 LTS / 24.10 / 25.04 : Python vulnerabilities (USN-7583-1)

The remote Ubuntu 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7583-1 advisory. It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An attacker could possibly use this...

9.4CVSS6.8AI score0.01376EPSS
SaveExploits14References6
Ubuntu
Ubuntu
added 2025/06/19 12:22 p.m.13 views

USN-7583-1: Python vulnerabilities

It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data loss...

9.4CVSS7AI score0.01376EPSS
SaveExploits14
OSV
OSV
added 2025/06/19 12:22 p.m.7 views

USN-7583-1 python3.13, python3.12 vulnerabilities

It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data loss...

9.4CVSS5.9AI score0.01376EPSS
SaveExploits14References6
Redos
Redos
added 2025/06/19 12:00 a.m.9 views

ROS-20250619-17

Vulnerability of CompressorStreamFactory, TarArchiveInputStream and TarFile classes of Apache Commons archiver Compress is related to uncontrolled resource consumption as a result of insufficient input data validation when processing TAR archive headers. Exploitation of the vulnerability could...

5.5CVSS6.3AI score0.00489EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/06/16 8:23 p.m.5 views

CVE-2025-32799 Conda-build Vulnerable to Path Traversal via Malicious Tar File

Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal Tarslip attacks due to improper sanitization of tar entry paths. Attackers can craft tar archives containing entries with directory traversal...

6.1CVSS7.3AI score0.01317EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/06/16 8:23 p.m.30 views

CVE-2025-32799 Conda-build Vulnerable to Path Traversal via Malicious Tar File

Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal Tarslip attacks due to improper sanitization of tar entry paths. Attackers can craft tar archives containing entries with directory traversal...

6.1CVSS0.01317EPSS
SaveExploits1References4
CVE
CVE
added 2025/06/16 8:23 p.m.56 views

CVE-2025-32799

CVE-2025-32799 affects conda-build prior to 25.4.0, where tar entry path sanitization allows path traversal (Tarslip) in created/extracted archives. Attacks could overwrite files outside the extraction directory, potentially leading to privilege escalation or code execution. A fix is available in...

9.8CVSS7.9AI score0.01317EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder