The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
Max CVSS
7.5
EPSS Score
0.28%
Published
2022-08-10
Updated
2023-01-11
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.
Max CVSS
7.5
EPSS Score
0.28%
Published
2022-08-10
Updated
2023-01-11
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.
Max CVSS
8.1
EPSS Score
0.25%
Published
2022-08-10
Updated
2023-01-11
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.
Max CVSS
9.1
EPSS Score
0.32%
Published
2022-08-10
Updated
2023-02-23
Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.
Max CVSS
5.8
EPSS Score
0.34%
Published
2014-02-20
Updated
2014-02-20
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.
Max CVSS
6.8
EPSS Score
3.44%
Published
2013-10-17
Updated
2023-02-13
6 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!