ZeroDay Findings
Sign inSign up

Findings

CVE-2022-48303

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.

Published Jan 30, 2023 · updated Oct 15, 2026 · gnu tar

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 30, 2023 · NIST NVD

    Detected

    GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.

  2. Oct 14, 2026 · NIST NVD

    Updated

    GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.

  3. Oct 15, 2026 · OSV.dev

    Fix available

    tar fixed in 1.34-r1; tar fixed in 1.34-r1; tar fixed in 1.34-r1; tar fixed in 1.34-r2

  4. Oct 15, 2026 · OSV.dev

    Fix available

    tar fixed in 1.34-r1

  5. Oct 15, 2026 · OSV.dev

    Fix available

    tar fixed in 1.34-r2

  6. Oct 15, 2026 · OSV.dev

    Updated

    GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.

Affected

  • Alpine:v3.14 tar0 → 1.34-r1
  • Alpine:v3.15 tar0 → 1.34-r1
  • Alpine:v3.16 tar0 → 1.34-r1
  • Alpine:v3.17 tar0 → 1.34-r2
  • Alpine:v3.18 tar0 → 1.34-r2
  • Alpine:v3.19 tar0 → 1.34-r2
  • Alpine:v3.20 tar0 → 1.34-r2
  • Alpine:v3.21 tar0 → 1.34-r2
  • Alpine:v3.22 tar0 → 1.34-r2
  • Alpine:v3.23 tar0 → 1.34-r2
  • Alpine:v3.24 tar0 → 1.34-r2
  • cpe fedoraproject/fedora37
  • cpe fedoraproject/fedora38
  • cpe gnu/tarversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2022-48303

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2022-48303

    30-day exploitation probability 1.5%

    first.org
  • NIST NVDVulnerability recordCVE-2022-48303

    GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approxima

    nvd.nist.gov
  • OSV.devPackage advisoryALPINE-CVE-2022-48303
    osv.dev

References