Lucene search
+L

6198 matches found

Photon
Photon
added 2024/01/07 12:00 a.m.22 views

Moderate Photon OS Security Update - PHSA-2024-4.0-0540

Updates of 'tar' packages of Photon OS have been released...

6.2CVSS9.9AI score0.00283EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/01/01 12:00 a.m.6 views

PT-2025-7422

Name of the Vulnerable Software and Affected Versions fs/tar affected versions not specified Description The issue is related to an integer overflow that causes a heap out-of-bounds write. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

6.8CVSS6.6AI score0.00287EPSS
SaveExploits0References137
OSV
OSV
added 2023/12/29 11:06 a.m.7 views

OESA-2023-2002 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in...

2.8CVSS6.7AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/29 11:06 a.m.6 views

OESA-2023-1993 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in...

2.8CVSS6.7AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/29 11:06 a.m.7 views

OESA-2023-1994 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in...

2.8CVSS6.7AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/29 11:06 a.m.6 views

OESA-2023-1991 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in...

2.8CVSS6.7AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/29 11:06 a.m.6 views

OESA-2023-1992 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in...

2.8CVSS6.7AI score0.00283EPSS
SaveExploits0References2
Photon
Photon
added 2023/12/23 12:00 a.m.26 views

Moderate Photon OS Security Update - PHSA-2023-5.0-0178

Updates of 'tar' packages of Photon OS have been released...

6.2CVSS9.9AI score0.00283EPSS
SaveExploits0
Photon
Photon
added 2023/12/22 12:00 a.m.24 views

Moderate Photon OS Security Update - PHSA-2023-3.0-0703

Updates of 'tar' packages of Photon OS have been released...

6.2CVSS9.9AI score0.00283EPSS
SaveExploits0
NVD
NVD
added 2023/12/18 4:15 a.m.26 views

CVE-2023-6908

A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function unzipfile of the file kuiper/app/controllers/casemanagement.py of the component TAR Archive Handler. The manipulation of the argument dstpath leads to path traversal. It is possib...

5.9CVSS0.00755EPSS
SaveExploits0References5
Prion
Prion
added 2023/12/18 4:15 a.m.19 views

Path traversal

A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function unzipfile of the file kuiper/app/controllers/casemanagement.py of the component TAR Archive Handler. The manipulation of the argument dstpath leads to path traversal. It is possib...

2.6CVSS7.2AI score0.00755EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2023/12/18 1:00 a.m.54 views

CVE-2023-6908

DFIRKuiper Kuiper 2.3.4 contains a path-traversal vulnerability in the TAR Archive Handler’s unzip_file function (kuiper/app/controllers/case_management.py). Manipulating the dst_path argument enables traversal, and remote initiation is possible with high attack complexity and no required privile...

5.9CVSS4.8AI score0.00755EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2023/12/18 1:00 a.m.29 views

CVE-2023-6908 DFIRKuiper TAR Archive case_management.py unzip_file path traversal

A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function unzipfile of the file kuiper/app/controllers/casemanagement.py of the component TAR Archive Handler. The manipulation of the argument dstpath leads to path traversal. It is possib...

3.1CVSS6AI score0.00755EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/18 1:00 a.m.24 views

CVE-2023-6908 DFIRKuiper TAR Archive case_management.py unzip_file path traversal

A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function unzipfile of the file kuiper/app/controllers/casemanagement.py of the component TAR Archive Handler. The manipulation of the argument dstpath leads to path traversal. It is possib...

3.1CVSS4.7AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/12/18 12:00 a.m.15 views

PT-2023-32816 · Unknown · Dfirkuiper Kuiper

Name of the Vulnerable Software and Affected Versions: DFIRKuiper Kuiper version 2.3.4 Description: A problematic issue was found in the TAR Archive Handler component, specifically affecting the unzip file function of the case management.py file. The manipulation of the dst path argument leads to...

5.9CVSS4.4AI score0.00755EPSS
SaveExploits0References8
Veracode
Veracode
added 2023/12/15 4:25 p.m.30 views

Denial Of Service (DOS)

Tar is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a defect in a function xattrdecoder within xheader.c where sufficiently long xattr key may overflow a stack where alloca is used. An attacker can trick a user into processing a malicious archive, causing an application...

6.2CVSS7.2AI score0.00283EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/12/13 1:16 a.m.6 views

SUSE CVE-2023-39804

In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c...

2.8CVSS8.6AI score0.00283EPSS
SaveExploits0References47
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/12 1:01 p.m.29 views

Security Bulletin: IBM Storage Insights is vulnerable to weaknesses related to Apache Commons Compress

Summary Vulnerability in Apache Commons Compress may affect IBM Storage Insights. Vulnerability Details CVEID:CVE-2023-42503 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by improper input validation. By persuading a victim to open a specially crafted TAR file,...

5.5CVSS6.1AI score0.00489EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2023/12/11 7:27 p.m.33 views

CVE-2023-39804

A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service. Mitigation Do not process untrusted tar archives...

3.3CVSS6.4AI score0.00283EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/11 12:26 a.m.7 views

USN-6543-1 tar vulnerability

It was discovered that tar incorrectly handled extended attributes in PAX archives. An attacker could use this issue to cause tar to crash, resulting in a denial of service...

6.2CVSS6.9AI score0.00283EPSS
SaveExploits0References2
Rows per page
Query Builder