RHEL 9 : ant (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ant: excessive memory allocation when reading a specially crafted TAR archive CVE-2021-36373 Note that Nessus has n...

OESA-2024-2170 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

CVE-2024-6232

...

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive...

BIT-PYTHON-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

RHSA-2023:5610 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2023:0959 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2023:0842 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2019:2097 Red Hat Security Advisory: perl-Archive-Tar security update

Bulletin has no description...

Rocky Linux 9 : nodejs:18 (RLSA-2024:6147)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6147 advisory. node-tar: denial of service while parsing a tar file due to lack of folders depth validation CVE-2024-28863 nodejs: Bypass network import restriction vi...

Rocky Linux 8 : nodejs:18 (RLSA-2024:6148)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6148 advisory. node-tar: denial of service while parsing a tar file due to lack of folders depth validation CVE-2024-28863 nodejs: Bypass network import restriction vi...

RHSA-2010:0505 Red Hat Security Advisory: perl-Archive-Tar security update

Bulletin has no description...

RHSA-2010:0142 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2010:0141 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2007:0860 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2006:0749 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2006:0232 Red Hat Security Advisory: tar security update

Bulletin has no description...

RHSA-2006:0195 Red Hat Security Advisory: tar security update

Bulletin has no description...

Security Bulletin: Vulnerability in Apache Commons Compress affects watsonx.data

Summary Apache Commons Compress is vulnerable to a denial of service, caused by an out of memory error when allocating large amounts of memory. For CVE-2021-35517, when reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out o...