Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3hqh-8h99-q2cf

Опубликовано: 09 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

EPSS

Процентиль: 27%
0.00341
Низкий

3.9 Low

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 3.9
ubuntu
около 1 года назад

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

CVSS3: 3.9
redhat
около 1 года назад

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

CVSS3: 3.9
nvd
около 1 года назад

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

CVSS3: 3.9
msrc
11 месяцев назад

Libarchive: reading past eof may be triggered for piped file streams

CVSS3: 3.9
debian
около 1 года назад

A vulnerability has been identified in the libarchive library. This fl ...

EPSS

Процентиль: 27%
0.00341
Низкий

3.9 Low

CVSS3

Дефекты

CWE-125