GNU Tar vulnerability

2023-12-1100:00:00

ubuntu.com

ubuntu

gnu

tar

vulnerability

extended attributes

denial of service

pax archives

crash

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Releases

Ubuntu 23.10
Ubuntu 23.04
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

tar - GNU version of the tar archiving utility

Details

It was discovered that tar incorrectly handled extended attributes in PAX
archives. An attacker could use this issue to cause tar to crash, resulting in a
denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchtar< 1.34+dfsg-1.2ubuntu1.1UNKNOWN
Ubuntu23.10noarchtar-dbgsym< 1.34+dfsg-1.2ubuntu1.1UNKNOWN
Ubuntu23.10noarchtar-scripts< 1.34+dfsg-1.2ubuntu1.1UNKNOWN
Ubuntu23.04noarchtar< 1.34+dfsg-1.2ubuntu0.2UNKNOWN
Ubuntu23.04noarchtar-dbgsym< 1.34+dfsg-1.2ubuntu0.2UNKNOWN
Ubuntu23.04noarchtar-scripts< 1.34+dfsg-1.2ubuntu0.2UNKNOWN
Ubuntu22.04noarchtar< 1.34+dfsg-1ubuntu0.1.22.04.2UNKNOWN
Ubuntu22.04noarchtar-dbgsym< 1.34+dfsg-1ubuntu0.1.22.04.2UNKNOWN
Ubuntu22.04noarchtar-scripts< 1.34+dfsg-1ubuntu0.1.22.04.2UNKNOWN
Ubuntu20.04noarchtar< 1.30+dfsg-7ubuntu0.20.04.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.10	noarch	tar	< 1.34+dfsg-1.2ubuntu1.1	UNKNOWN
Ubuntu	23.10	noarch	tar-dbgsym	< 1.34+dfsg-1.2ubuntu1.1	UNKNOWN
Ubuntu	23.10	noarch	tar-scripts	< 1.34+dfsg-1.2ubuntu1.1	UNKNOWN
Ubuntu	23.04	noarch	tar	< 1.34+dfsg-1.2ubuntu0.2	UNKNOWN
Ubuntu	23.04	noarch	tar-dbgsym	< 1.34+dfsg-1.2ubuntu0.2	UNKNOWN
Ubuntu	23.04	noarch	tar-scripts	< 1.34+dfsg-1.2ubuntu0.2	UNKNOWN
Ubuntu	22.04	noarch	tar	< 1.34+dfsg-1ubuntu0.1.22.04.2	UNKNOWN
Ubuntu	22.04	noarch	tar-dbgsym	< 1.34+dfsg-1ubuntu0.1.22.04.2	UNKNOWN
Ubuntu	22.04	noarch	tar-scripts	< 1.34+dfsg-1ubuntu0.1.22.04.2	UNKNOWN
Ubuntu	20.04	noarch	tar	< 1.30+dfsg-7ubuntu0.20.04.4	UNKNOWN