Vulnerability Details CVE-2023-39804
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.8%
CVSS Severity
CVSS v3 Score 6.2
Products affected by CVE-2023-39804
-
-
-
-
-
-
-
cpe:2.3:a:gnu:tar:1.13.11
-
cpe:2.3:a:gnu:tar:1.13.14
-
cpe:2.3:a:gnu:tar:1.13.16
-
cpe:2.3:a:gnu:tar:1.13.17
-
cpe:2.3:a:gnu:tar:1.13.18
-
cpe:2.3:a:gnu:tar:1.13.19
-
cpe:2.3:a:gnu:tar:1.13.25
-
-
-
-
cpe:2.3:a:gnu:tar:1.14.90
-
-
-
cpe:2.3:a:gnu:tar:1.15.90
-
cpe:2.3:a:gnu:tar:1.15.91
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-