Количество 14
Количество 14
GHSA-rrh7-4pj2-xxq8
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via ...
RLSA-2026:49525
Important: perl-Archive-Tar security update
RLSA-2026:49524
Important: perl-Archive-Tar security update
RLSA-2026:49523
Important: perl-Archive-Tar security update
RLSA-2026:48225
Important: perl:5.32 security update
ELSA-2026-49525
ELSA-2026-49525: perl-Archive-Tar security update (IMPORTANT)
ELSA-2026-49524
ELSA-2026-49524: perl-Archive-Tar security update (IMPORTANT)
ELSA-2026-49523
ELSA-2026-49523: perl-Archive-Tar security update (IMPORTANT)
ELSA-2026-48225
ELSA-2026-48225: perl:5.32 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-rrh7-4pj2-xxq8 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header | 0% Низкий | 4 месяца назад | |
| CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via ... | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | RLSA-2026:49525 Important: perl-Archive-Tar security update | 0% Низкий | около 1 месяца назад | |
| RLSA-2026:49524 Important: perl-Archive-Tar security update | 0% Низкий | около 1 месяца назад | |
| RLSA-2026:49523 Important: perl-Archive-Tar security update | 0% Низкий | около 1 месяца назад | |
| RLSA-2026:48225 Important: perl:5.32 security update | 0% Низкий | около 2 месяцев назад | |
| ELSA-2026-49525 ELSA-2026-49525: perl-Archive-Tar security update (IMPORTANT) | 0% Низкий | около 1 месяца назад | |
| ELSA-2026-49524 ELSA-2026-49524: perl-Archive-Tar security update (IMPORTANT) | 0% Низкий | около 1 месяца назад | |
| ELSA-2026-49523 ELSA-2026-49523: perl-Archive-Tar security update (IMPORTANT) | 0% Низкий | около 1 месяца назад | |
| ELSA-2026-48225 ELSA-2026-48225: perl:5.32 security update (IMPORTANT) | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу