CVE 설명

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-252	Unchecked Return Value The product does not check the return value from a method or function.
CWE-606	Unchecked Input for Loop Condition The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
CWE-770	Allocation of Resources Without Limits or Throttling The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.