TencentOS Server 3: libtar (TSSA-2023:0136)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0136 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

USN-7398-1: libtar vulnerabilities

It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service, or execute arbitrary code. CVE-2021-33643, CVE-2021-33644 It was discovered that libtar...

CVE-2013-4420

Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. dot dot in a crafted tar file...