Feep : Security Vulnerabilities, CVEs,
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
Max CVSS
7.5
EPSS Score
0.30%
Published
2022-08-10
Updated
2023-01-11
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.
Max CVSS
7.5
EPSS Score
0.30%
Published
2022-08-10
Updated
2023-01-11
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.
Max CVSS
8.1
EPSS Score
0.26%
Published
2022-08-10
Updated
2023-01-11
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.
Max CVSS
9.1
EPSS Score
0.34%
Published
2022-08-10
Updated
2023-02-23
Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.
Max CVSS
5.8
EPSS Score
0.34%
Published
2014-02-20
Updated
2014-02-20
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.
Max CVSS
6.8
EPSS Score
3.44%
Published
2013-10-17
Updated
2023-02-13
6 vulnerabilities found