Количество 16
Количество 16
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine.
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine.
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine.
CVE-2026-6103
Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a u ...
GHSA-j3wh-g957-2m85
Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
openSUSE-SU-2026:22045-1
Security update for php8
SUSE-SU-2026:4651-1
Security update for php8
SUSE-SU-2026:4603-1
Security update for php8
SUSE-SU-2026:4602-1
Security update for php8
ALT-PU-2026-17471
ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1
ALT-PU-2026-17464
ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1
ALT-PU-2026-17462
ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1
ALT-PU-2026-17414
ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1
RLSA-2026:87080
Important: php:7.4 security update
ELSA-2026-87080
ELSA-2026-87080: php:7.4 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine. | CVSS3: 4.3 | 0% Низкий | 28 дней назад |
 | CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine. | CVSS3: 4.3 | 0% Низкий | 28 дней назад |
 | CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine. | CVSS3: 4.3 | 0% Низкий | 28 дней назад |
 | CVE-2026-6103 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection | CVSS3: 4 | 0% Низкий | 25 дней назад |
| CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a u ... | CVSS3: 4.3 | 0% Низкий | 28 дней назад |
| GHSA-j3wh-g957-2m85 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection | CVSS3: 4 | 0% Низкий | 30 дней назад |
 | openSUSE-SU-2026:22045-1 Security update for php8 | 17 дней назад | ||
| SUSE-SU-2026:4651-1 Security update for php8 | 11 дней назад | ||
| SUSE-SU-2026:4603-1 Security update for php8 | 15 дней назад | ||
| SUSE-SU-2026:4602-1 Security update for php8 | 15 дней назад | ||
| ALT-PU-2026-17471 ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17464 ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17462 ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17414 ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1 | CVSS3: 7.5 | 18 дней назад | |
 | RLSA-2026:87080 Important: php:7.4 security update | 2 дня назад | ||
| ELSA-2026-87080 ELSA-2026-87080: php:7.4 security update (IMPORTANT) | 3 дня назад |
Уязвимостей на страницу