PT-2023-27111 · Gnu+5 · Gnu Tar+5

Salvatore Bonaccorso · Publicado 2023-11-30 · Atualizado 2025-07-29 · CVE-2023-39804

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU tar versions prior to 1.35

Description The issue arises from mishandled extension attributes in a PAX archive, which can cause an application crash in xheader.c.

Recommendations For GNU tar versions prior to 1.35, update to version 1.35 or later to resolve the issue.

Correção

Identificadores relacionados

AZL-52625

CVE-2023-39804

DLA-3755-1

OESA-2023-1991

OESA-2023-1992

OESA-2023-1993

OESA-2023-1994

OESA-2023-2002

OPENSUSE-SU-2024:13751-1

SUSE-SU-2024:0070-1

SUSE-SU-2024:0070-2

SUSE-SU-2024:0071-1

SUSE-SU-2024_0070-1

SUSE-SU-2024_0071-1

USN-6543-1

Produtos afetados

Astra Linux

Gnu Tar

Linuxmint

Red Os

Suse

Ubuntu

Referências · 41

• https://osv.dev/vulnerability/SUSE-SU-2024:0070-2 · Aviso do Fabricante
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-2002 · Nota
• https://bugzilla.suse.com/1217969 · Nota
• https://osv.dev/vulnerability/AZL-52625 · Aviso do Fabricante
• https://git.savannah.gnu.org/cgit/tar.git/commit/?id=a339f05cd269013fa133d2f148d73f6f7d4247e4 · Correção
• https://osv.dev/vulnerability/OESA-2023-1993 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-39804 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2023-1991 · Aviso do Fabricante
• https://docs.bell-sw.com/security/cves/CVE-2023-39804 · Nota
• https://osv.dev/vulnerability/CVE-2023-39804 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-39804 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-6543-1 · Aviso do Fabricante
• https://t.me/cvenotify/74760 · Publicação no Telegram
• https://osv.dev/vulnerability/OESA-2023-1992 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-39804 · Nota