Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 27/03/2024 Updated: 27/03/2024

In GNU tar prior to 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

Debian Bug report logs - #1058079 tar: CVE-2023-39804: Incorrectly handled extension attributes in PAX archives can lead to a crash Package: src:tar; Maintainer for src:tar is Janos Lenart <ocsi@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 12 Dec 2023 06:45:02 UTC Severity: important ...

It was discovered that tar incorrectly handled extended attributes in PAX archives An attacker could supply a specially crafted file and cause tar to crash, resulting in a denial of service (CVE-2023-39804) ...

https://git.savannah.gnu.org/cgit/tar.git/commit/?id=a339f05cd269013fa133d2f148d73f6f7d4247e4 https://git.savannah.gnu.org/cgit/tar.git/tree/src/xheader.c?h=release_1_34#n1723 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058079 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058079 https://alas.aws.amazon.com/AL2/ALAS-2024-2390.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-39804

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect