CVE-2023-39804
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an...
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
CVE-2023-39804- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2023-43504
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
EUVD-2023-43504- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5pvw-wf9w-xx8v
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an...
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
GHSA-5pvw-wf9w-xx8v- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
NVD
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
CVE-2023-39804- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2023-39804
- Record
BELL-CVE-2023-39804- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
CVE-2023-39804- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 20 moreShow less
OSVDEBIAN-CVE-2023-39804
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
DEBIAN-CVE-2023-39804- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-185
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
JLSEC-2026-185- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1991
tar security update
GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored.
Security Fix(es):
A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.(CVE-2023-39804)
- Record
OESA-2023-1991- CVSS 3.1
- 2.8 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2023-1992
tar security update
GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored.
Security Fix(es):
A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.(CVE-2023-39804)
- Record
OESA-2023-1992- CVSS 3.1
- 2.8 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2023-1993
tar security update
GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored.
Security Fix(es):
A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.(CVE-2023-39804)
- Record
OESA-2023-1993- CVSS 3.1
- 2.8 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2023-1994
tar security update
GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored.
Security Fix(es):
A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.(CVE-2023-39804)
- Record
OESA-2023-1994- CVSS 3.1
- 2.8 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2023-2002
tar security update
GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored.
Security Fix(es):
A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.(CVE-2023-39804)
- Record
OESA-2023-2002- CVSS 3.1
- 2.8 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-39804
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
UBUNTU-CVE-2023-39804- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-52625 No score
CVE-2023-39804 affecting package tar for versions less than 1.34-3
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- Record
AZL-52625- Updated
- 2026-11-02
OSVCLSA-2024-1706026767 No score
Fix CVE(s): CVE-2023-39804
- SECURITY UPDATE: denial of service attack
- debian/patches/CVE-2023-39804.patch: Fix handling of extended header prefixes.
- CVE-2023-39804.patch
- Record
CLSA-2024-1706026767- Updated
- 2026-11-02
OSVCLSA-2024-1710436683 No score
Fix CVE(s): CVE-2023-39804
- SECURITY UPDATE: denial of service attack
- debian/patches/CVE-2023-39804.patch: Fix handling of extended header prefixes.
- CVE-2023-39804
- Record
CLSA-2024-1710436683- Updated
- 2026-11-02
OSVCLSA-2025-1762535960 No score
tar: Fix of CVE-2023-39804
- CVE-2023-39804: fix crash in GNU tar caused by incorrect handling of extended PAX xattr headers leading to memory corruption (DoS)
- Record
CLSA-2025-1762535960- Updated
- 2026-11-02
OSVCLSA-2025-1762536241 No score
tar: Fix of CVE-2023-39804
- CVE-2023-39804: fix crash in GNU tar caused by incorrect handling of extended PAX xattr headers leading to memory corruption (DoS)
- Record
CLSA-2025-1762536241- Updated
- 2026-11-02
OSVCLSA-2026-1778820779 No score
tar: Fix of CVE-2023-39804
- CVE-2023-39804: fix crash on PAX archive with malformed extended header attributes in locate_handler and xattr_decoder
- Record
CLSA-2026-1778820779- Updated
- 2026-11-02
OSVCLSA-2026-1778828497 No score
tar: Fix of CVE-2023-39804
- CVE-2023-39804: fix crash on PAX archive with malformed extended header attributes in locate_handler and xattr_decoder
- Record
CLSA-2026-1778828497- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13751-1 No score
tar-1.35-2.1 on GA media
These are all security issues fixed in the tar-1.35-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13751-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0070-1 No score
Security update for tar
This update for tar fixes the following issues:
- CVE-2023-39804: Fixed extension attributes in PAX archives incorrect hanling (bsc#1217969).
- Record
SUSE-SU-2024:0070-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0070-2 No score
Security update for tar
This update for tar fixes the following issues:
- CVE-2023-39804: Fixed extension attributes in PAX archives incorrect hanling (bsc#1217969).
- Record
SUSE-SU-2024:0070-2- Updated
- 2026-11-02
OSVSUSE-SU-2024:0071-1 No score
Security update for tar
This update for tar fixes the following issues:
- CVE-2023-39804: Incorrectly handled extension attributes in PAX archives can lead to a crash (bsc#1217969)
- Record
SUSE-SU-2024:0071-1- Updated
- 2026-11-02
OSVUSN-6543-1 No score
tar vulnerability
It was discovered that tar incorrectly handled extended attributes in PAX archives. An attacker could use this issue to cause tar to crash, resulting in a denial of service.
- Record
USN-6543-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tarAzure Linux:2 |
before 1.34-3 | 1.34-3 |
tarAlpaquita:23 |
1.34-r1 up to 1.34-r3 | 1.34-r3 |
tarTuxCare:Ubuntu:16.04 |
before 1.28-2.1ubuntu0.2+tuxcare.els2 | 1.28-2.1ubuntu0.2+tuxcare.els2 |
tar-scriptsTuxCare:Ubuntu:16.04 |
before 1.28-2.1ubuntu0.2+tuxcare.els2 | 1.28-2.1ubuntu0.2+tuxcare.els2 |
tarTuxCare:Ubuntu:18.04 |
before 1.29b-2ubuntu0.4+tuxcare.els1 | 1.29b-2ubuntu0.4+tuxcare.els1 |
tar-scriptsTuxCare:Ubuntu:18.04 |
before 1.29b-2ubuntu0.4+tuxcare.els1 | 1.29b-2ubuntu0.4+tuxcare.els1 |
tarTuxCare:CentOS:8.5 |
before 2:1.30-5.el8.tuxcare.els2 | 2:1.30-5.el8.tuxcare.els2 |
tarTuxCare:CentOS:8.4 |
before 2:1.30-5.el8.tuxcare.els2 | 2:1.30-5.el8.tuxcare.els2 |
tarTuxCare:AlmaLinux:9.2 |
before 2:1.34-7.el9.tuxcare.els2 | 2:1.34-7.el9.tuxcare.els2 |
tarTuxCare:AlmaLinux:9.6 |
before 2:1.34-7.el9.tuxcare.els2 | 2:1.34-7.el9.tuxcare.els2 |
Show 29 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tarDebian:12 |
before 1.34+dfsg-1.2+deb12u1, plus listed versions 1.34+dfsg-1.2 |
1.34+dfsg-1.2+deb12u1 |
tarDebian:13 |
before 1.34+dfsg-1.3 | 1.34+dfsg-1.3 |
tarDebian:14 |
before 1.34+dfsg-1.3 | 1.34+dfsg-1.3 |
tarDebian:10 |
before 1.30+dfsg-6+deb10u1, plus listed versions 1.30+dfsg-6 |
1.30+dfsg-6+deb10u1 |
Tar_jllJulia |
before 1.35.0+0 | 1.35.0+0 |
taropenEuler:22.03-LTS-SP2 |
before 1.34-5.oe2203sp2 | 1.34-5.oe2203sp2 |
taropenEuler:22.03-LTS-SP1 |
before 1.34-5.oe2203sp1 | 1.34-5.oe2203sp1 |
taropenEuler:22.03-LTS |
before 1.34-5.oe2203 | 1.34-5.oe2203 |
taropenEuler:20.03-LTS-SP3 |
before 1.32-4.oe1 | 1.32-4.oe1 |
taropenEuler:20.03-LTS-SP1 |
before 1.32-4.oe1 | 1.32-4.oe1 |
tarSUSE:Linux Enterprise Micro 5.3 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
tarSUSE:Linux Enterprise Micro 5.4 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
tarSUSE:Linux Enterprise Micro 5.5 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
tarSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
tarSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
tarSUSE:Linux Enterprise Micro 5.1 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
tarSUSE:Linux Enterprise Micro 5.2 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
taropenSUSE:Leap Micro 5.3 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
taropenSUSE:Leap Micro 5.4 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
taropenSUSE:Leap 15.4 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
taropenSUSE:Leap 15.5 |
before 1.34-150000.3.34.1 | 1.34-150000.3.34.1 |
tarSUSE:Linux Enterprise Server 12 SP5 |
before 1.27.1-15.24.1 | 1.27.1-15.24.1 |
tarSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.27.1-15.24.1 | 1.27.1-15.24.1 |
tarUbuntu:Pro:14.04:LTS |
before 1.27.1-1ubuntu0.1+esm4, plus listed versions 1.26+dfsg-81.27-31.27-41.27.1-11.27.1-1ubuntu0.11.27.1-1ubuntu0.1+esm11.27.1-1ubuntu0.1+esm21.27.1-1ubuntu0.1+esm3 |
1.27.1-1ubuntu0.1+esm4 |
tarUbuntu:Pro:16.04:LTS |
before 1.28-2.1ubuntu0.2+esm3, plus listed versions 1.27.1-21.28-2ubuntu11.28-2.11.28-2.1ubuntu0.11.28-2.1ubuntu0.21.28-2.1ubuntu0.2+esm11.28-2.1ubuntu0.2+esm2 |
1.28-2.1ubuntu0.2+esm3 |
tarUbuntu:Pro:18.04:LTS |
before 1.29b-2ubuntu0.4+esm1, plus listed versions 1.29b-21.29b-2ubuntu0.11.29b-2ubuntu0.21.29b-2ubuntu0.31.29b-2ubuntu0.4 |
1.29b-2ubuntu0.4+esm1 |
tarUbuntu:20.04:LTS |
before 1.30+dfsg-7ubuntu0.20.04.4, plus listed versions 1.30+dfsg-61.30+dfsg-71.30+dfsg-7ubuntu0.20.04.11.30+dfsg-7ubuntu0.20.04.21.30+dfsg-7ubuntu0.20.04.3 |
1.30+dfsg-7ubuntu0.20.04.4 |
tarUbuntu:22.04:LTS |
before 1.34+dfsg-1ubuntu0.1.22.04.2, plus listed versions 1.34+dfsg-1build11.34+dfsg-1build21.34+dfsg-1build31.34+dfsg-1ubuntu0.1.22.04.1 |
1.34+dfsg-1ubuntu0.1.22.04.2 |
taropenSUSE:Tumbleweed |
before 1.35-2.1 | 1.35-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-39804 is a medium vulnerability (CVSS 6.2) in Gnu Tar, published November 30, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in tar 1.34-3.
References
git.savannah.gnu.org/cgit/tar.git/commit?id=a339f05cd269013fa133d2f148d73f6f7d4247e4
bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058079
lists.debian.org/debian-lts-announce/2024/03/msg00008.html
nvd.nist.gov/vuln/detail/CVE-2023-39804
github.com/advisories/GHSA-5pvw-wf9w-xx8v
Show 22 moreShow less
docs.bell-sw.com/security/cves/CVE-2023-39804
errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1706026767.html
errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1762535960.html
security-tracker.debian.org/tracker/CVE-2023-39804
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1991
suse.com/support/update/announcement/2024/suse-su-20240070-1
bugzilla.suse.com/1217969
ubuntu.com/security/CVE-2023-39804
cve.org/CVERecord?id=CVE-2023-39804