Oracle Linux 8 : perl-Archive-Tar (ELSA-2026-49524)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49524 advisory. - Fix CVE-2026-9538: cap per-entry declared size during tar read to defend against attacker-controlled size-field memory DoS Tenable has extracted the precedin...

RHEL 8 : perl-Archive-Tar (RHSA-2026:49524)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:49524 advisory. Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also...

CVE-2026-9538

creationtimestamp| type| source ---|---|--- 2026-05-26 08:48:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmapfnzb2s...

CVE-2026-9538

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. readtar reads each entry's payload with $handle-read$$data, $block, where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that...