bsdtar vulnerabilities

Known vulnerabilities in the bsdtar package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Race Condition	*
L Unchecked Return Value	*
M Link Following	*
M Link Following	*
H Integer Overflow or Wraparound	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Integer Overflow or Wraparound	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Improper Input Validation	<0:3.1.2-10.el7_2
H Incorrect Calculation	<0:3.1.2-10.el7_2
H Integer Overflow or Wraparound	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Heap-based Buffer Overflow	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Heap-based Buffer Overflow	<0:3.1.2-10.el7_2
H Integer Overflow or Wraparound	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Allocation of Resources Without Limits or Throttling	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Heap-based Buffer Overflow	<0:3.1.2-10.el7_2
H Allocation of Resources Without Limits or Throttling	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Improper Handling of Syntactically Invalid Structure	<0:3.1.2-10.el7_2
H Use After Free	<0:3.1.2-14.el7_7
M Use After Free	<0:3.1.2-12.el7
M Use After Free	<0:3.1.2-12.el7
M Out-of-bounds Read	<0:3.1.2-12.el7
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:3.1.2-12.el7
M Out-of-bounds Read	*
M Improper Input Validation	*
M Out-of-bounds Read	<0:3.1.2-12.el7
M Off-by-one Error	*
L Incorrect Calculation of Buffer Size	*
L Incorrect Calculation of Buffer Size	*
L Improper Handling of Syntactically Invalid Structure	*
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	*
L NULL Pointer Dereference	*
M Out-of-bounds Write	*
L Out-of-bounds Read	*
L Integer Overflow or Wraparound	*
L Directory Traversal	*
L Out-of-bounds Read	*
L Heap-based Buffer Overflow	*

Vulnerability

Vulnerable Version

Race Condition