CVE-2019-9923

Mô tả

Tham khảo

• git.savannah.gnu.org/cgit/tar.git/commit · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html · Mailing List
• savannah.gnu.org/bugs · Permissions Required
• bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241 · Issue Tracking
• lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• cert-portal.siemens.com/productcert/html/ssa-398330.html

Lỗ hổng khác của tar

• CVE-2026-18477TRUNG BÌNH 4.4A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write a…
• CVE-2026-18508TRUNG BÌNH 4.4A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated…
• CVE-2025-45582TRUNG BÌNH 4.1GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the vict…
• CVE-2023-39804TRUNG BÌNH 6.2In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
• CVE-2022-48303TRUNG BÌNH 5.5GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to c…