Photon OS 3.0: Libtar PHSA-2022-3.0-0437

An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0437. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libtar PHSA-2023-5.0-0010

An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libtar PHSA-2022-4.0-0231

An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0231. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33646)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33646 advisory. - The thread function doesn't free a variable t-thbuf.gnulongname after allocating memory, which may cause a...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33643)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33643 advisory. - An attacker who submits a crafted tar file with size in header struct being 0 May be able to trigger an...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33645)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33645 advisory. - The thread function doesn't free a variable t-thbuf.gnulonglink after allocating memory, which may cause a...

CBL Mariner 2.0 Security Update: libtar (CVE-2013-4420)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2013-4420 advisory. - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33644)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33644 advisory. - An attacker who submits a crafted tar file with size in header struct being 0 May be able to trigger an...

RHEL 6 : libtar (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtar: missing validation of file names CVE-2013-4420 Note that Nessus has not tested for this issue but has inste...

RHEL 7 : libtar (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtar: missing validation of file names CVE-2013-4420 Note that Nessus has not tested for this issue but has inste...

CVE-2021-33640 affecting package libtar for versions less than 1.2.20-11

CVE-2021-33640 affecting package libtar for versions less than 1.2.20-11. A patched version of the package is available...

CVE-2021-33646 affecting package libtar for versions less than 1.2.20-11

CVE-2021-33646 affecting package libtar for versions less than 1.2.20-11. A patched version of the package is available...

CVE-2021-33644 affecting package libtar for versions less than 1.2.20-11

CVE-2021-33644 affecting package libtar for versions less than 1.2.20-11. A patched version of the package is available...

CVE-2021-33643 affecting package libtar for versions less than 1.2.20-11

CVE-2021-33643 affecting package libtar for versions less than 1.2.20-11. A patched version of the package is available...

CVE-2021-33645 affecting package libtar for versions less than 1.2.20-11

CVE-2021-33645 affecting package libtar for versions less than 1.2.20-11. A patched version of the package is available...

CVE-2013-4420 affecting package libtar for versions less than 1.2.20-11

CVE-2013-4420 affecting package libtar for versions less than 1.2.20-11. A patched version of the package is available...

K000135439: libtar vulnerabilities CVE-2021-33643, CVE-2021-33644, CVE-2021-33645, CVE-2021-33646

Security Advisory Description CVE-2021-33643 An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulonglink, causing an out-of-bounds read. CVE-2021-33644 An attacker who submits a crafted tar file with size in...

Advisory ROSA-SA-2023-2172

Software: libtar 1.2.20 OS: ROSA Virtualization 2.1 packageevrstring: libtar-1.2.20-17.rv3 CVE-ID: CVE-2021-33644 BDU-ID: None CVE-Crit: HIGH CVE-DESC: An attacker who sends a created tar file with a size in the header structure equal to 0 could cause a call to malloc0 for the gnulongname variabl...

EulerOS Virtualization 3.0.6.0 : libtar (EulerOS-SA-2023-2224)

According to the versions of the libtar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues ...

Huawei EulerOS: Security Advisory for libtar (EulerOS-SA-2023-2224)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...