Поиск уязвимостей
Количество 15
Количество 15
GHSA-rrh7-4pj2-xxq8
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via ...
RLSA-2026:49525
Important: perl-Archive-Tar security update
RLSA-2026:49524
Important: perl-Archive-Tar security update
RLSA-2026:49523
Important: perl-Archive-Tar security update
RLSA-2026:48225
Important: perl:5.32 security update
ELSA-2026-49525
ELSA-2026-49525: perl-Archive-Tar security update (IMPORTANT)
ELSA-2026-49524
ELSA-2026-49524: perl-Archive-Tar security update (IMPORTANT)
ELSA-2026-49523
ELSA-2026-49523: perl-Archive-Tar security update (IMPORTANT)
ELSA-2026-48225
ELSA-2026-48225: perl:5.32 security update (IMPORTANT)
ALT-PU-2026-19061
ALT-PU-2026-19061: package `perl-Archive-Tar` update to version 3.14-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-rrh7-4pj2-xxq8 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header | 1% Низкий | 5 месяцев назад | |
| CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via ... | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | RLSA-2026:49525 Important: perl-Archive-Tar security update | 1% Низкий | 3 месяца назад | |
| RLSA-2026:49524 Important: perl-Archive-Tar security update | 1% Низкий | 3 месяца назад | |
| RLSA-2026:49523 Important: perl-Archive-Tar security update | 1% Низкий | 3 месяца назад | |
| RLSA-2026:48225 Important: perl:5.32 security update | 1% Низкий | 3 месяца назад | |
| ELSA-2026-49525 ELSA-2026-49525: perl-Archive-Tar security update (IMPORTANT) | 1% Низкий | 3 месяца назад | |
| ELSA-2026-49524 ELSA-2026-49524: perl-Archive-Tar security update (IMPORTANT) | 1% Низкий | 3 месяца назад | |
| ELSA-2026-49523 ELSA-2026-49523: perl-Archive-Tar security update (IMPORTANT) | 1% Низкий | 3 месяца назад | |
| ELSA-2026-48225 ELSA-2026-48225: perl:5.32 security update (IMPORTANT) | 1% Низкий | 3 месяца назад | |
| ALT-PU-2026-19061 ALT-PU-2026-19061: package `perl-Archive-Tar` update to version 3.14-alt1 | CVSS3: 9.1 | 18 дней назад |
Уязвимостей на страницу