Lucene search
K

6 matches found

AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.7 views

Astra Linux – Vulnerability in Python 3.11

The “tarfile” module will still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even when processing multi-block members such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could lead to a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...

3.3CVSS5.8AI score0.00164EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/03/13 2:23 p.m.5 views

SUSE CVE-2025-13462

The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...

2.5CVSS5.8AI score0.00164EPSS
Exploits0References17
NVD
NVD
added 2026/03/12 6:16 p.m.4 views

CVE-2025-13462

The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...

3.3CVSS0.00164EPSS
Exploits0References9
OSV
OSV
added 2026/03/12 6:16 p.m.4 views

UBUNTU-CVE-2025-13462

The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...

3.3CVSS5.8AI score0.00164EPSS
Exploits0References3
OSV
OSV
added 2026/03/12 5:59 p.m.11 views

PSF-2026-10

The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...

3.3CVSS5.8AI score0.00164EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2026/03/12 5:59 p.m.7 views

CVE-2025-13462

The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...

3.3CVSS5.2AI score0.00164EPSS
Exploits0
Rows per page
Query Builder