VYPR

rpm package

suse/tar&distro=SUSE Linux Enterprise Real Time 15 SP3

pkg:rpm/suse/tar&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3

Vulnerabilities (1)

  • CVE-2022-48303Jan 30, 2023
    affected < 1.34-150000.3.31.1fixed 1.34-150000.3.31.1

    GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approxima