Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-722w-734r-qg74

Опубликовано: 02 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4

Описание

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

EPSS

Процентиль: 1%
0.00008
Низкий

4 Medium

CVSS3

Дефекты

CWE-252

Связанные уязвимости

CVSS3: 4
ubuntu
4 месяца назад

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

CVSS3: 4
redhat
4 месяца назад

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

CVSS3: 4
nvd
4 месяца назад

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

CVSS3: 4
msrc
3 месяца назад

Описание отсутствует

CVSS3: 4
debian
4 месяца назад

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not c ...

EPSS

Процентиль: 1%
0.00008
Низкий

4 Medium

CVSS3

Дефекты

CWE-252