Record · corpus.blog/posts/01a07df4-8001-71d8-a49c-3a1cbda18192

Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2023-38346)

Pentagrid · published 19 September 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pentagrid.ch Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 21
Words captured: 2,710

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.windriver.com/products/vxworks

windriver.com

https://mars.nasa.gov/msl/home/

mars.nasa.gov

https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2023-38346

support2.windriver.com

https://www.windriver.com/psirt-policy

windriver.com

https://github.com/isaacs/node-tar/security/advisories/GHSA-5955-9wpr-37jh

github.com

https://github.com/isaacs/node-tar/security/advisories/GHSA-qq89-hq3f-393p

github.com

https://github.com/isaacs/node-tar/security/advisories/GHSA-9r2w-394v-53qc

github.com

https://github.com/isaacs/node-tar/security/advisories/GHSA-r628-mhmh-qjhw

github.com

https://github.com/isaacs/node-tar/security/advisories/GHSA-3jfq-g458-7qm9

github.com

https://www.sonarsource.com/blog/bitbucket-path-traversal-to-rce/

sonarsource.com

https://www.randori.com/blog/cve-2021-21972-vsphere-vulnerability-analysis/

randori.com

https://security.snyk.io/research/zip-slip-vulnerability

security.snyk.io

https://www.rapid7.com/blog/post/2022/10/06/exploitation-of-unpatched-zero-day-remote-code-execution-vulnerability-in-zimbra-collaboration-suite-cve-2022-41352/

rapid7.com

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669

bugs.debian.org

https://nvd.nist.gov/vuln/detail/CVE-2007-4559

nvd.nist.gov

https://docs.python.org/3.11/library/tarfile.html

docs.python.org

https://www.trellix.com/en-us/about/newsroom/stories/research/tarfile-exploiting-the-world.html

trellix.com

https://www.trellix.com/en-us/about/newsroom/stories/research/open-source-intelligence.html

trellix.com

https://commons.apache.orgZimbra/proper/commons-compress/apidocs/overview-summary.html

commons.apache.orgzimbra

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

cisa.gov

Busybox cpio directory traversal vulnerability (CVE-2023-39810) Read at the source ↗

pentagrid.ch