CVE-2023-42503

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.22 through 1.23

Description The issue is related to uncontrolled resource consumption due to insufficient input validation when processing TAR archive headers. This can be exploited by a remote attacker to cause a denial of service. The estimated number of potentially affected devices is not specified.

Recommendations For Apache Commons Compress versions 1.22 through 1.23, update to version 1.24.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of TAR archives from untrusted sources to minimize the risk of exploitation.