perl-Archive-Tar vulnerabilities (TuxCare)
11 vulnerabilities.
perl-Archive-TarTuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra…9.1 Criticalperl-Archive-TarTuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack8.4 Highperl-Archive-TarTuxCareArchive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header7.5 Highperl-Archive-TarTuxCareArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory9.1 Criticalperl-Archive-TarTuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds9.8 Criticalperl-Archive-TarTuxCareCPAN 2.28 allows Signature Verification Bypass.7.8 Highperl-Archive-TarTuxCareCVE-2020-12723 does not affect BellSoft software7.5 Highperl-Archive-TarTuxCareCVE-2020-10878 does not affect BellSoft software8.6 Highperl-Archive-TarTuxCareCVE-2020-10543 does not affect BellSoft software8.2 Highperl-Archive-TarTuxCarePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...9.8 Criticalperl-Archive-TarTuxCareIn Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...7.5 High