JLSEC-2025-243
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-243.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-243.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/JLSEC-2025-243
- Upstream
- Published
- 2025-11-25T22:03:17.636Z
- Modified
- 2025-11-25T22:33:23.514310Z
- Summary
- list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value,...
- Details
-
listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.
- Database specific
{ "sources": [ { "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-25724", "id": "CVE-2025-25724", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25724", "published": "2025-03-02T02:15:36.603Z", "modified": "2025-07-17T15:56:36.083Z", "imported": "2025-11-25T21:58:26.892Z" } ], "license": "CC-BY-4.0" }- References