CVE-2019-9923High· 7.5▾ Twilightpax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.0%
pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
tar < 1.32leap = 15.0Upgrade past the affected range:
tar 1.32Connected by shared product, vendor, weakness, or advisory.
CVE-2018-20482Medium· 4.7GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed …
CVE-2021-38604High· 7.5In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference
CVE-2021-4209Medium· 6.5A NULL pointer dereference flaw was found in GnuTLS
CVE-2020-24659High· 7.5An issue was discovered in GnuTLS before 3.6.15
CVE-2021-20193Low· 3.3A flaw was found in the src/list.c of tar 1.33 and earlier
CVE-2026-1584High· 7.5A flaw was found in gnutls