Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Mageia: 2019-0164 Moderate: Tar NULL Pointer Dereference

mageia
Calendar Grey May 12, 2019
Dist Mageia Esm H88
MGASA-2022-0458 advisory: New software patch addresses a severe security flaw in Mageia 7 stemming from an uninitialized data pointer.
pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers (CVE-2019-9923)

Summary

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers (CVE-2019-9923).

References

- https://bugs.mageia.org/show_bug.cgi?id=24756

- - https://www.cve.org/CVERecord?id=CVE-2019-9923

Topics%20covered

Topics Covered

security advisory security issue critical NULL pointer tar Mageia malformed headers

Resolution

SRPMS

- 6/core/tar-1.31-1.1.mga6

Publication date: 12 May 2019
URL: https://advisories.mageia.org/MGASA-2019-0164.html
Type: security
CVE: CVE-2019-9923

Topics%20covered

Topics Covered

security advisory security issue critical NULL pointer tar Mageia malformed headers

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here