Lucene search
K

132 matches found

F5 Networks
F5 Networks
added 2025/02/14 5:30 p.m.12 views

K000149808: Python tarfile vulnerability CVE-2007-4559

Security Advisory Description Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

9.8CVSS7AI score0.89361EPSS
Exploits3
RedHat Linux
RedHat Linux
added 2024/11/12 10:29 a.m.2 views

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

7.5CVSS7.2AI score0.03014EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2024/11/12 10:25 a.m.2 views

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

7.5CVSS7.2AI score0.03014EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2024/11/05 2:55 a.m.2 views

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

7.5CVSS7.2AI score0.03014EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2024/11/04 6:0 a.m.1 views

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

7.5CVSS7.2AI score0.03014EPSS
Exploits2References7
Tenable Nessus
Tenable Nessus
added 2024/10/25 12:0 a.m.5 views

F5 Networks BIG-IP : Python tarfile vulnerability (K000148252)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148252 advisory. There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking...

7.5CVSS7AI score0.03014EPSS
Exploits2References2
RedHat Linux
RedHat Linux
added 2024/10/01 2:34 a.m.2 views

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

7.5CVSS7.2AI score0.03014EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2024/09/24 3:8 a.m.0 views

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

7.5CVSS7.2AI score0.03014EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2024/09/23 2:1 a.m.1 views

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

7.5CVSS7.2AI score0.03014EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2024/01/25 8:3 a.m.4 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2024/01/23 5:31 p.m.5 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/14 4:8 p.m.5 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/14 4:5 p.m.5 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/14 4:4 p.m.6 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/14 3:53 p.m.3 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/14 3:48 p.m.5 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/14 3:32 p.m.3 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/08 8:20 a.m.1 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/07 8:59 a.m.8 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2023/11/07 8:48 a.m.7 views

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...

9.8CVSS6.7AI score0.89361EPSS
Exploits3References4
Rows per page
Query Builder