Количество 14
Количество 14
GHSA-j3wh-g957-2m85
Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine.
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine.
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine.
CVE-2026-6103
Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
CVE-2026-6103
phar_tar_number() parses the octal size field of a TAR header into a u ...
openSUSE-SU-2026:22045-1
Security update for php8
SUSE-SU-2026:4651-1
Security update for php8
SUSE-SU-2026:4603-1
Security update for php8
SUSE-SU-2026:4602-1
Security update for php8
ALT-PU-2026-17471
ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1
ALT-PU-2026-17464
ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1
ALT-PU-2026-17462
ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1
ALT-PU-2026-17414
ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-j3wh-g957-2m85 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection | CVSS3: 4 | 0% Низкий | 29 дней назад |
 | CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine. | CVSS3: 4.3 | 0% Низкий | 27 дней назад |
 | CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine. | CVSS3: 4.3 | 0% Низкий | 27 дней назад |
 | CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlled file content as the next TAR header, which lets a crafted archive inject entries that PharData reports and extracts as if they were genuine. | CVSS3: 4.3 | 0% Низкий | 27 дней назад |
 | CVE-2026-6103 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection | CVSS3: 4 | 0% Низкий | 24 дня назад |
| CVE-2026-6103 phar_tar_number() parses the octal size field of a TAR header into a u ... | CVSS3: 4.3 | 0% Низкий | 27 дней назад |
 | openSUSE-SU-2026:22045-1 Security update for php8 | 16 дней назад | ||
| SUSE-SU-2026:4651-1 Security update for php8 | 9 дней назад | ||
| SUSE-SU-2026:4603-1 Security update for php8 | 14 дней назад | ||
| SUSE-SU-2026:4602-1 Security update for php8 | 14 дней назад | ||
| ALT-PU-2026-17471 ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1 | CVSS3: 7.5 | 17 дней назад | |
| ALT-PU-2026-17464 ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1 | CVSS3: 7.5 | 17 дней назад | |
| ALT-PU-2026-17462 ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1 | CVSS3: 7.5 | 17 дней назад | |
| ALT-PU-2026-17414 ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1 | CVSS3: 7.5 | 17 дней назад |
Уязвимостей на страницу