Carlos Andres Ramirez

**Name of the Vulnerable Software and Affected Versions** tar versions 1.33 and earlier **Description** A flaw in the src/list.c of tar allows an attacker who can submit a crafted input file to cause uncontrolled consumption of memory, potentially leading to system availability issues. The vulnerability is related to a buffer overflow in the read header() function of GNU Tar. An attacker can exploit this vulnerability by submitting a specially crafted input file, which may result in a denial of service. **Recommendations** For tar versions 1.33 and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the use of tar with untrusted input files to minimize the risk of memory consumption issues. Avoid using tar with crafted input files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.