CVE-2023-39804

Description

References

• bugs.debian.org/cgi-bin/bugreport.cgi · Mailing List
• git.savannah.gnu.org/cgit/tar.git/commit · Patch
• git.savannah.gnu.org/cgit/tar.git/tree/src/xheader.c · Product
• lists.debian.org/debian-lts-announce/2024/03/msg00008.html

tar의 다른 취약점

• CVE-2026-18477보통 4.4A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write a…
• CVE-2026-18508보통 4.4A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated…
• CVE-2025-45582보통 4.1GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the vict…
• CVE-2022-48303보통 5.5GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to c…
• CVE-2021-20193낮음 3.3A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause…