Beveiligingsadvies

CVE-2025-58183

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-29 22:10:14

Laatst bijgewerkt 2025-11-04 21:13:32

Toegewezen door Go

CVSS-score 4.3

Status PUBLISHED

Beschrijving

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

← Alle CVE's bekijken Bekijk op cve.org ↗