Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar…

Description

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.

Produits et versions touchés

Produit Versions touchées Corrigé en
Archive::Tar 3.10 premières → < 3.10 3.10

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Archive::Tar

Les 3 CVE de Archive::Tar →
CVE-2026-42497 Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction… 7.5 Élevée CVE-2026-42496 Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction… 9.1 Critique
Suivre cette CVE