Lucene search

K
osvGoogleOSV:USN-6543-1
HistoryDec 11, 2023 - 12:26 a.m.

tar vulnerability

2023-12-1100:26:33
Google
osv.dev
9
tar
vulnerability
extended attributes
pax archives
denial of service
software

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

15.5%

It was discovered that tar incorrectly handled extended attributes in PAX
archives. An attacker could use this issue to cause tar to crash, resulting in a
denial of service.