Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-9923

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-9923
  • Gnu » Tar » Version: N/A
    cpe:2.3:a:gnu:tar:-
  • Gnu » Tar » Version: 1.11
    cpe:2.3:a:gnu:tar:1.11
  • Gnu » Tar » Version: 1.11.1
    cpe:2.3:a:gnu:tar:1.11.1
  • Gnu » Tar » Version: 1.11.8
    cpe:2.3:a:gnu:tar:1.11.8
  • Gnu » Tar » Version: 1.12
    cpe:2.3:a:gnu:tar:1.12
  • Gnu » Tar » Version: 1.13
    cpe:2.3:a:gnu:tar:1.13
  • Gnu » Tar » Version: 1.13.11
    cpe:2.3:a:gnu:tar:1.13.11
  • Gnu » Tar » Version: 1.13.14
    cpe:2.3:a:gnu:tar:1.13.14
  • Gnu » Tar » Version: 1.13.16
    cpe:2.3:a:gnu:tar:1.13.16
  • Gnu » Tar » Version: 1.13.17
    cpe:2.3:a:gnu:tar:1.13.17
  • Gnu » Tar » Version: 1.13.18
    cpe:2.3:a:gnu:tar:1.13.18
  • Gnu » Tar » Version: 1.13.19
    cpe:2.3:a:gnu:tar:1.13.19
  • Gnu » Tar » Version: 1.13.25
    cpe:2.3:a:gnu:tar:1.13.25
  • Gnu » Tar » Version: 1.13.5
    cpe:2.3:a:gnu:tar:1.13.5
  • Gnu » Tar » Version: 1.14
    cpe:2.3:a:gnu:tar:1.14
  • Gnu » Tar » Version: 1.14.1
    cpe:2.3:a:gnu:tar:1.14.1
  • Gnu » Tar » Version: 1.14.90
    cpe:2.3:a:gnu:tar:1.14.90
  • Gnu » Tar » Version: 1.15
    cpe:2.3:a:gnu:tar:1.15
  • Gnu » Tar » Version: 1.15.1
    cpe:2.3:a:gnu:tar:1.15.1
  • Gnu » Tar » Version: 1.15.90
    cpe:2.3:a:gnu:tar:1.15.90
  • Gnu » Tar » Version: 1.15.91
    cpe:2.3:a:gnu:tar:1.15.91
  • Gnu » Tar » Version: 1.16
    cpe:2.3:a:gnu:tar:1.16
  • Gnu » Tar » Version: 1.16.1
    cpe:2.3:a:gnu:tar:1.16.1
  • Gnu » Tar » Version: 1.17
    cpe:2.3:a:gnu:tar:1.17
  • Gnu » Tar » Version: 1.18
    cpe:2.3:a:gnu:tar:1.18
  • Gnu » Tar » Version: 1.19
    cpe:2.3:a:gnu:tar:1.19
  • Gnu » Tar » Version: 1.20
    cpe:2.3:a:gnu:tar:1.20
  • Gnu » Tar » Version: 1.21
    cpe:2.3:a:gnu:tar:1.21
  • Gnu » Tar » Version: 1.22
    cpe:2.3:a:gnu:tar:1.22
  • Gnu » Tar » Version: 1.23
    cpe:2.3:a:gnu:tar:1.23
  • Gnu » Tar » Version: 1.24
    cpe:2.3:a:gnu:tar:1.24
  • Gnu » Tar » Version: 1.25
    cpe:2.3:a:gnu:tar:1.25
  • Gnu » Tar » Version: 1.26
    cpe:2.3:a:gnu:tar:1.26
  • Gnu » Tar » Version: 1.27
    cpe:2.3:a:gnu:tar:1.27
  • Gnu » Tar » Version: 1.27.1
    cpe:2.3:a:gnu:tar:1.27.1
  • Gnu » Tar » Version: 1.28
    cpe:2.3:a:gnu:tar:1.28
  • Gnu » Tar » Version: 1.29
    cpe:2.3:a:gnu:tar:1.29
  • Gnu » Tar » Version: 1.30
    cpe:2.3:a:gnu:tar:1.30
  • Gnu » Tar » Version: 1.31
    cpe:2.3:a:gnu:tar:1.31
  • Opensuse » Leap » Version: 15.0
    cpe:2.3:o:opensuse:leap:15.0


Contact Us

Shodan ® - All rights reserved