CVE-2026-11972 : 詳細

CVE-2026-11972

2026-06-23
23h16 +00:00
2026-10-25
23h10 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-252 Unchecked Return Value
The product does not check the return value from a method or function.
CWE-606 Unchecked Input for Loop Condition
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

参考資料