Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a tar header that follows a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive, which results in a NULL pointer dereference, a different issue than CVE-2007-3644.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD libarchive畸形文档处理拒绝服务漏洞
Vulnerability Description
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的libarchive库在处理畸形格式的TAR及PAX文件时存在漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文档控制用户系统。 FreeBSD中所捆绑的libarchive库提供灵活的接口用于读写tar和cpio之类的流文档文件，该库中用于解析tar和pax交换格式的代码中存在几个漏洞。如果pax扩展头后的tar头中文档过早结束的话，或如果pax扩展头中出现某种类型的破坏的话，就会引用空指针，导致拒绝服务
CVSS Information
N/A
Vulnerability Type
N/A