2 matches found
tar-rs incorrectly ignores PAX size headers if header size is nonzero
...
8.1CVSS5.8AI score0.00397EPSS
SaveExploits1
tar-rs incorrectly ignores PAX size headers if header size is nonzero
Versions 0.4.44 and below of tar-rs have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518astral-cve, the astral-tokio-tar project was changed to correctly honor PAX size headers in the case where it was different from the...
8.1CVSS7.4AI score0.00677EPSS
SaveExploits1Affected Software1
20