Описание
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | pending | 1.35+dfsg-4ubuntu2 |
| esm-infra-legacy/trusty | released | 1.27.1-1ubuntu0.1+esm7 |
| esm-infra-legacy/xenial | released | 1.28-2.1ubuntu0.2+esm6 |
| esm-infra/bionic | released | 1.29b-2ubuntu0.4+esm4 |
| esm-infra/focal | released | 1.30+dfsg-7ubuntu0.20.04.4+esm3 |
| esm-infra/xenial | ignored | end of ESM support, was deferred [2026-04-23] |
| jammy | released | 1.34+dfsg-1ubuntu0.1.22.04.6 |
| noble | released | 1.35+dfsg-3ubuntu0.4 |
| questing | ignored | end of life, was needs-triage |
| resolute | released | 1.35+dfsg-4ubuntu0.4 |
Показывать по
EPSS
5 Medium
CVSS3
Связанные уязвимости
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
A flaw was found in tar. A remote attacker could exploit this vulnerab ...
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
EPSS
5 Medium
CVSS3