Количество 45
Количество 45
BDU:2025-14528
Уязвимость компонента tar.Reader языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20251029-07
Множественные уязвимости golang
CVE-2025-58183
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
CVE-2025-58183
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
CVE-2025-58183
Unbounded allocation when parsing GNU sparse map in archive/tar
CVE-2025-58183
tar.Reader does not set a maximum size on the number of sparse region ...
RLSA-2025:23948
Moderate: grafana security update
RLSA-2025:23374
Moderate: container-tools:rhel8 security update
RLSA-2025:23326
Moderate: skopeo security update
RLSA-2025:23325
Moderate: podman security update
RLSA-2025:23295
Moderate: podman security update
RLSA-2025:23294
Moderate: skopeo security update
RLSA-2025:23088
Moderate: grafana security update
RLSA-2025:23087
Moderate: grafana security update
RLSA-2025:21816
Moderate: delve and golang security update
RLSA-2025:21815
Moderate: delve and golang security update
GHSA-9gcr-gp5f-jw27
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
ELSA-2026-50076
ELSA-2026-50076: image-builder security update (MODERATE)
ELSA-2026-1837
ELSA-2026-1837: osbuild-composer security update (MODERATE)
ELSA-2026-1381
ELSA-2026-1381: osbuild-composer security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-14528 Уязвимость компонента tar.Reader языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
 | ROS-20251029-07 Множественные уязвимости golang | CVSS3: 8.2 | 3 месяца назад | |
 | CVE-2025-58183 tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations. | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
 | CVE-2025-58183 tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations. | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
 | CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar | CVSS3: 5.5 | 0% Низкий | 3 месяца назад |
| CVE-2025-58183 tar.Reader does not set a maximum size on the number of sparse region ... | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
 | RLSA-2025:23948 Moderate: grafana security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:23374 Moderate: container-tools:rhel8 security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:23326 Moderate: skopeo security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:23325 Moderate: podman security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:23295 Moderate: podman security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:23294 Moderate: skopeo security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:23088 Moderate: grafana security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:23087 Moderate: grafana security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2025:21816 Moderate: delve and golang security update | 0% Низкий | 2 месяца назад | |
| RLSA-2025:21815 Moderate: delve and golang security update | 0% Низкий | 3 месяца назад | |
| GHSA-9gcr-gp5f-jw27 tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations. | CVSS3: 3.3 | 0% Низкий | 3 месяца назад |
| ELSA-2026-50076 ELSA-2026-50076: image-builder security update (MODERATE) | 9 дней назад | ||
| ELSA-2026-1837 ELSA-2026-1837: osbuild-composer security update (MODERATE) | 3 дня назад | ||
| ELSA-2026-1381 ELSA-2026-1381: osbuild-composer security update (MODERATE) | 10 дней назад |
Уязвимостей на страницу