[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faYv7f0Z8zUFRsV0B-VmWul9lbcZ4nhR6yFQogGrCWEM":3,"g5a-risk:CVE-2022-48303":141},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":28,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":52,"references":53,"referencesCount":81,"weaknesses":82,"weaknessesCount":91,"isActivelyExploited":92,"cisaInfo":28,"otxData":28,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":136,"notableEvents":137},"CVE-2022-48303","What is CVE-2022-48303?","GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.","GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of...","2023-01-30T04:15:08.03","2025-03-27T21:15:40.483",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":30},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},0.04524,[35,35,35,35,35,35,35],"Medium",[39,44,49],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"gnu","tar","*","cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"fedoraproject","fedora","37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",3,[54,60,63,69,73,75,77,79],{"url":55,"source":56,"tags":57},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FCRY7VEL4AIG3GLIEVCTOXRZNSVYDYYUD\u002F","Fedoraproject",[58,59],"Mailing List","Third Party Advisory",{"url":61,"source":56,"tags":62},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FX5VQYCO52Z7GAVCLRYUITN7KXHLRZQS4\u002F",[58,59],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fsavannah.gnu.org\u002Fbugs\u002F?62387","Gnu",[67,68],"Exploit","Vendor Advisory",{"url":70,"source":65,"tags":71},"https:\u002F\u002Fsavannah.gnu.org\u002Fpatch\u002F?10307",[72,68],"Patch",{"url":55,"source":56,"tags":74},[58,59],{"url":61,"source":56,"tags":76},[58,59],{"url":64,"source":65,"tags":78},[67,68],{"url":70,"source":65,"tags":80},[72,68],8,[83],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2022-48303? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-48303, a medium severity cyber security vulnerability from 2023. GNU Tar through 1.34 has a one-byte out-of-bounds read th...","CVE-2022-48303, CVE-2022-48303 vulnerability, CVE-2022-48303 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, gnu security, fedoraproject security, tar vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2022-48303",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":10,"dateModified":11,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-48303","Cybersecurity","CVE-2022-48303, CVE-2022-48303 vulnerability, CVE-2022-48303 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120,128],{"Operator":28,"Negate":28,"Nodes":121},[122],{"Operator":123,"Negate":28,"CPEMatch":124},"OR",[125],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":126,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":127},"07E94814-967C-4B81-9137-6DA8E51F81D2","1.34",{"Operator":28,"Negate":28,"Nodes":129},[130],{"Operator":123,"Negate":28,"CPEMatch":131},[132,134],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":135,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",[],[],{"lastModified":11,"cacheTime":139,"version":140},1793204185237,"2.0",{"score":142,"band":37,"action":143,"scoredAt":144},40,"Plan remediation","2026-07-01T10:29:38.783805+00:00"]