Wind River Support Network

HomeDefectsLIN1019-10687

Fixed

LIN1019-10687 : Security Advisory - tar - CVE-2023-39804

Created: Dec 12, 2023 Updated: Dec 15, 2023

Resolved Date: Dec 15, 2023

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

tar: Incorrectly handled extension attributes in PAX archives can lead to a crash.

https://git.savannah.gnu.org/cgit/tar.git/commit/?id=a339f05cd269013fa133d2f148d73f6f7d4247e4

CREATE(Triage):(User=admin) CVE-2023-39804 (https://nvd.nist.gov/vuln/detail/CVE-2023-39804)

CVEs

CVE-2023-39804