PT-2019-19939 · Gnu+6 · Gnu Tar+6

Padma81 · Publicado 2019-02-24 · Atualizado 2025-08-28 · CVE-2019-9923

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNU Tar versions prior to 1.32

Description The issue arises from a NULL pointer dereference in the pax decode header function within sparse.c when parsing certain archives with malformed extended headers.

Recommendations For GNU Tar versions prior to 1.32, update to version 1.32 or later to resolve the issue.

Correção

Infinite Loop

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-835

CWE-476

Identificadores relacionados

ALT-PU-2019-1302

BDU:2025-10839

CVE-2019-9923

MGASA-2019-0164

OPENSUSE-SU-2019:1237-1

OPENSUSE-SU-2019_1237-1

OPENSUSE-SU-2022_1548-1

OPENSUSE-SU-2024:11422-1

SUSE-SU-2019:0926-1

SUSE-SU-2019:14215-1

SUSE-SU-2019_14215-1

SUSE-SU-2020:2806-1

SUSE-SU-2022:1548-1

SUSE-SU-2022_1548-1

USN-4692-1

Produtos afetados

Alt Linux

Astra Linux

Gnu Tar

Linuxmint

Red Os

Suse

Ubuntu

Referências · 49

• https://lists.opensuse.org/archives/list/[e-mail]/thread/4J7MEOLQLFRA3ARNABFNLF2I4CI6U4D6/#4J7MEOLQLFRA3ARNABFNLF2I4CI6U4D6 · Nota
• https://suse.com/security/cve/CVE-2018-20482 · Nota
• https://ubuntu.com/security/notices/USN-4692-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2022/suse-su-20221548-1 · Nota
• https://cve.org/CVERecord?id=CVE-2019-9923 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2022:1548-1 · Aviso do Fabricante
• https://bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241 · Correção
• https://bugzilla.suse.com/1130496 · Nota
• https://suse.com/security/cve/CVE-2002-0399 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11422-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-9923 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-9923 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-9923 · Aviso do Fabricante
• https://bugzilla.suse.com/1120610 · Nota
• http://savannah.gnu.org/bugs/?55369 · Nota