PT-2026-36869

Published

2026-04-24

Updated

2026-04-24

Description by

CVSS 3.1

6.2

Medium

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

Exploitability

Fix

Vendors

Affected products

Related identifiers

JLSEC-2026-185

Found an issue in the description? Have something to add? Feel free to write us 👾