VMware Photon OS: CVE-2022-48303

VMware Photon OS: CVE-2022-48303

Severity

5

CVSS

(AV:L/AC:L/Au:N/C:N/I:N/A:C)

Published

01/30/2023

Created

01/21/2025

Added

01/20/2025

Modified

02/04/2025

Description

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.

Solution(s)

• vmware-photon_os_update_tdnf

References

• https://attackerkb.com/topics/cve-2022-48303
• CVE - 2022-48303