Количество 12
Количество 12
BDU:2025-14528
Уязвимость компонента tar.Reader языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2025-58183
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
CVE-2025-58183
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
CVE-2025-58183
Unbounded allocation when parsing GNU sparse map in archive/tar
CVE-2025-58183
tar.Reader does not set a maximum size on the number of sparse region ...
RLSA-2025:21816
Moderate: delve and golang security update
GHSA-9gcr-gp5f-jw27
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
ELSA-2025-21815
ELSA-2025-21815: delve and golang security update (MODERATE)
ELSA-2025-22011
ELSA-2025-22011: buildah security update (IMPORTANT)
SUSE-SU-2025:3682-1
Security update for go1.24
SUSE-SU-2025:03547-1
Security update for go1.25
ROS-20251029-07
Множественные уязвимости golang
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-14528 Уязвимость компонента tar.Reader языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
 | CVE-2025-58183 tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations. | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
 | CVE-2025-58183 tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations. | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
 | CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar | 0% Низкий | около 1 месяца назад | |
| CVE-2025-58183 tar.Reader does not set a maximum size on the number of sparse region ... | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
 | RLSA-2025:21816 Moderate: delve and golang security update | 0% Низкий | 4 дня назад | |
| GHSA-9gcr-gp5f-jw27 tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations. | CVSS3: 3.3 | 0% Низкий | около 1 месяца назад |
| ELSA-2025-21815 ELSA-2025-21815: delve and golang security update (MODERATE) | 6 дней назад | ||
| ELSA-2025-22011 ELSA-2025-22011: buildah security update (IMPORTANT) | 6 дней назад | ||
 | SUSE-SU-2025:3682-1 Security update for go1.24 | около 1 месяца назад | ||
| SUSE-SU-2025:03547-1 Security update for go1.25 | около 2 месяцев назад | ||
 | ROS-20251029-07 Множественные уязвимости golang | CVSS3: 8.2 | около 1 месяца назад |
Уязвимостей на страницу