CVE ID:	CVE-2022-48303
Description:	GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2023.2198   1.3.6.1.4.1.25623.1.0.833667   1.3.6.1.4.1.25623.1.1.4.2023.0441.1   1.3.6.1.4.1.25623.1.1.2.2023.2174   1.3.6.1.4.1.25623.1.1.2.2023.2279   1.3.6.1.4.1.25623.1.1.2.2023.2007   1.3.6.1.4.1.25623.1.1.4.2023.0463.1   1.3.6.1.4.1.25623.1.0.827323   1.3.6.1.4.1.25623.1.1.10.2023.0079   1.3.6.1.4.1.25623.1.1.2.2023.1856   1.3.6.1.4.1.25623.1.1.2.2023.2028   1.3.6.1.4.1.25623.1.1.2.2023.1964   1.3.6.1.4.1.25623.1.1.2.2023.2507   1.3.6.1.4.1.25623.1.1.13.2023.083.01   1.3.6.1.4.1.25623.1.1.2.2023.2457   1.3.6.1.4.1.25623.1.1.2.2023.2440   1.3.6.1.4.1.25623.1.1.2.2023.1986   1.3.6.1.4.1.25623.1.1.2.2023.2079   1.3.6.1.4.1.25623.1.1.12.2023.5900.1   1.3.6.1.4.1.25623.1.0.827357   1.3.6.1.4.1.25623.1.1.2.2023.1881   1.3.6.1.4.1.25623.1.1.2.2023.2131   1.3.6.1.4.1.25623.1.1.2.2024.2299   1.3.6.1.4.1.25623.1.1.2.2023.2482   1.3.6.1.4.1.25623.1.1.12.2023.5900.2   1.3.6.1.4.1.25623.1.1.2.2023.2303
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-48303 FEDORA-2023-123778d70d https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRY7VEL4AIG3GLIEVCTOXRZNSVYDYYUD/ FEDORA-2023-f72d3caf36 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5VQYCO52Z7GAVCLRYUITN7KXHLRZQS4/ https://savannah.gnu.org/bugs/?62387 https://savannah.gnu.org/bugs/?62387 https://savannah.gnu.org/patch/?10307 https://savannah.gnu.org/patch/?10307