CVE-2022-48303 Memory corruption in n/a
A one-byte out-of-bounds read in GNU Tar can cause use of uninitialized memory, potentially leading to denial of service when processing crafted V7 archives.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-48303?
CVE-2022-48303 is a medium-severity memory corruption vulnerability in Fedoraproject Fedora, published on 30 Jan 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.
Weakness: CWE-125
Which versions are affected by CVE-2022-48303?
It affects 2 products.
Linux distribution packages (24)
tar AlmaLinux:8 | All versions | 2:1.30-6.el8_7.1 |
tar AlmaLinux:9 | All versions | 2:1.34-6.el9_1 |
tar Red Hat:enterprise_linux:8::baseos | All versions | 2:1.30-6.el8_7.1 |
tar-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 2:1.30-6.el8_7.1 |
tar-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 2:1.30-6.el8_7.1 |
tar Red Hat:enterprise_linux:9::baseos | All versions | 2:1.34-6.el9_1 |
tar-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 2:1.34-6.el9_1 |
tar-debugsource Red Hat:enterprise_linux:9::baseos | All versions | 2:1.34-6.el9_1 |
tar Red Hat:rhel_eus:8.6::baseos | All versions | 2:1.30-5.el8_6.1 |
tar-debuginfo Red Hat:rhel_eus:8.6::baseos | All versions | 2:1.30-5.el8_6.1 |
tar-debugsource Red Hat:rhel_eus:8.6::baseos | All versions | 2:1.30-5.el8_6.1 |
tar Rocky Linux:8 | All versions | 2:1.30-6.el8_7.1 |
tar Rocky Linux:9 | All versions | 2:1.34-6.el9_1 |
tar SUSE:Linux Enterprise Micro 5.1 | All versions | 1.34-150000.3.31.1 |
tar SUSE:Linux Enterprise Micro 5.2 | All versions | 1.34-150000.3.31.1 |
tar SUSE:Linux Enterprise Micro 5.3 | All versions | 1.34-150000.3.31.1 |
tar SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 1.34-150000.3.31.1 |
tar SUSE:Linux Enterprise Real Time 15 SP3 | All versions | 1.34-150000.3.31.1 |
tar SUSE:Linux Enterprise Server 12 SP5 | All versions | 1.27.1-15.18.1 |
tar SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 1.27.1-15.18.1 |
tar openSUSE:Leap 15.4 | All versions | 1.34-150000.3.31.1 |
tar openSUSE:Leap Micro 5.2 | All versions | 1.34-150000.3.31.1 |
tar openSUSE:Leap Micro 5.3 | All versions | 1.34-150000.3.31.1 |
tar openSUSE:Tumbleweed | All versions | 1.34-10.1 |
Products include Fedoraproject Fedora, Gnu Tar.
How do I fix CVE-2022-48303?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-48303 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-48303 exists.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALPINE-CVE-2022-48303, ALSA-2023:0842, ALSA-2023:0959, AZL-37145, CLSA-2023-1677783720, CLSA-2023-1677783889 and 20 more.