Lucene search

K
redhatcveRedhat.comRH:CVE-2023-39804
HistoryDec 11, 2023 - 7:27 p.m.

CVE-2023-39804

2023-12-1119:27:11
redhat.com
access.redhat.com
17
flaw
tar
extended attributes
pax archives
attacker
denial of service

AI Score

6.4

Confidence

High

EPSS

0

Percentile

15.5%

A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.

Mitigation

Do not process untrusted tar archives.