Denial Of Service (DOS)

2023-12-1516:25:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

tar

xattr_decoder

xheader.c

stack overflow

alloca

malicious archive

application crash

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Tar is vulnerable to Denial Of Service (DOS). The vulnerability is caused due to a defect in a function xattr_decoder() within xheader.c where sufficiently long xattr key may overflow a stack where alloca() is used. An attacker can trick a user into processing a malicious archive, causing an application to crash resulting in Denial Of Service (DOS).

CPENameOperatorVersion
tar:sideq1.32+dfsg-1
tar:sideq1.34+dfsg-1
tar:bullseyeeq1.30+dfsg-7
tar:sideq1.32+dfsg-1
tar:sideq1.34+dfsg-1
tar:bullseyeeq1.30+dfsg-7