PSF-2024-11: Regular-expression DoS when parsing TarFile headers
Published Sep 3, 2024
·Updated
There is a MEDIUM severity vulnerability affecting CPython.
Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.
Affected Software
1 affected component
Python Software Foundation CPython
Event History
Sep 3, 2024
CVE Published
via OSV·12:29 PM
Data Sourced
via OSV·12:29 PM
DescriptionSeverityWeakness