---
id: CVE-2022-48303
title: >-
  GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of
  uninitialized memory for a conditional jump
summary: >-
  GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of
  uninitialized memory for a conditional jump. Exploitation to change the flow
  of control has not been demonstrated. The issue occurs in from_header in
  list.c vi…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
cwe:
  - CWE-125
  - CWE-125
vendor: gnu
product: tar
affected:
  - tar <= 1.34
  - fedora = 37
  - fedora = 38
published: '2023-01-30'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:16:56.197'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-48303'
references:
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRY7VEL4AIG3GLIEVCTOXRZNSVYDYYUD/
    label: cve@mitre.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5VQYCO52Z7GAVCLRYUITN7KXHLRZQS4/
    label: cve@mitre.org
  - url: 'https://savannah.gnu.org/bugs/?62387'
    label: cve@mitre.org
  - url: 'https://savannah.gnu.org/patch/?10307'
    label: cve@mitre.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRY7VEL4AIG3GLIEVCTOXRZNSVYDYYUD/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5VQYCO52Z7GAVCLRYUITN7KXHLRZQS4/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://savannah.gnu.org/bugs/?62387'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://savannah.gnu.org/patch/?10307'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-806742.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.01476
epssPercentile: 0.73324
ingestedAt: '2026-10-14T19:49:57.529Z'
---

## Overview

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.

## Affected

- `tar <= 1.34`
- `fedora = 37`
- `fedora = 38`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.