| Package | Affected versions | Patched versions |
|---|---|---|
| active iq unified manager | ≥ 9.5 | |
| zfs storage appliance kit | = 8.8 | |
| python | ≥ 3.5.0, < 3.5.10≥ 3.6.0, < 3.6.12≥ 3.7.0, < 3.7.9≥ 3.8.0, < 3.8.5 | 3.5.103.6.123.7.93.8.5 |
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free