You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
tar vulnerability
About this tag
The tar vulnerability tag covers discussions about security flaws in GNU Tar, including CVE-2022-48303, a one-byte out-of-bounds read in versions up to 1.34. This bug, triggered by handling old V7 archive formats, could cause use of uninitialized memory during conditional jumps. The tag includes threads on the vulnerability's details, its patch, and the impact on Linux distributions and embedded systems. Users and administrators can find information on affected versions, mitigation steps, and the upstream fix. The tag is relevant for those managing systems that rely on GNU Tar for archiving and need to understand or address this specific memory safety issue.
GNU Tar’s handling of an old V7 archive format triggered a subtle memory-safety problem that quietly landed in the CVE lists: CVE-2022-48303 is a one‑byte out‑of‑bounds read in GNU Tar through version 1.34 that can cause use of uninitialized memory during a conditional jump — a bug that was...