CVE-2023-39804
MediumAdvisory
Published 30 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.2
- base score, highest
- EPSS
- 0.003
- 21st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,050
- of 17,787 indexed, latest versions
- Container images
- 967
- deployed by those charts
- Fix available
- 1 of 1
- affected package
tar - security update
Carried by container images the latest versions of 1,050 of 17,787 indexed charts deploy, on 967 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| tardeb | 1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+13 more | 1.27.1-1ubuntu0.1+esm4, 1.28-2.1ubuntu0.2+esm3, 1.29b-2ubuntu0.4+esm1, 1.30+dfsg-6+deb10u1+3 more | 967 |
- OSV records
- DEBIAN-CVE-2023-39804UBUNTU-CVE-2023-39804DLA-3755-1
- Also known as
- USN-6543-1
Charts affected
1,050 by stars
Container images carrying it
967 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| amartinm82/ | 1184353ff57b | tar | 1.30+dfsg-6+deb10u1 | 1 |
| amundsendev/ | 69e7915e61c1 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| amundsendev/ | 4d98eb21f5f9 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| amundsendev/ | 99dda9502c3e | tar | 1.30+dfsg-6+deb10u1 | 1 |
| andrewgolikov55/ | fcc001b61c0e | tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | 1 |
| anguda/ | c435285fc241 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| ankane/ | d3a9d8ac27bb | tar | 1.34+dfsg-1.2+deb12u1 | 1 |
| aolde/ | dc61ee713720 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| apache/ | 8647309f95d1 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| apache/ | afa47bf1692a | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| apache/ | 090b7f87ec7f | tar | 1.30+dfsg-6+deb10u1 | 1 |
| apache/ | 974efa2f21da | tar | 1.30+dfsg-6+deb10u1 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| apachepulsar/ | 4db6ff0b4045 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| apachepulsar/ | d056c89b7131 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| apachepulsar/ | d538416d5afe | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| apache/ | 133d35d2c263 | tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | 1 |
| apache/ | b4ec8c18d079 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| apache/ | 295f1dc87d98 | tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | 1 |
| apache/ | 80530f0308a5 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| apache/ | 92d055a84e9e | tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | 1 |
| arfath29/ | ee0750b18406 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| arfath29/ | 384b3e377f47 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| arilot/ | 27a4f7e0f9f1 | tar | 1.28-2.1ubuntu0.2+esm3 | 1 |
| arturisimo/ | d8dc4430531e | tar | 1.30+dfsg-6+deb10u1 | 1 |
| asdkant/ | a23d8bf7c885 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| assistiot/ | db9361dad79b | tar | 1.30+dfsg-6+deb10u1 | 1 |
| assistiot/ | 6a107f224c34 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| assistiot/ | c8a170683be7 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| assistiot/ | 0518b63a2e69 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| assistiot/ | 7473d77448e1 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| assistiot/ | d157fbe150e3 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| assistiot/ | 0fce3ea719a5 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| assistiot/ | 792715dd3084 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| assistiot/ | 0d3e6d35f168 | tar | 1.34+dfsg-1.2+deb12u1 | 1 |
| assistiot/ | e9bae124095f | tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | 1 |
| assistiot/ | ea254b6d8a31 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| assistiot/ | b1dbe4d62a03 | tar | 1.34+dfsg-1.2+deb12u1 | 1 |
| assistiot/ | e5ae539ce2cb | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| atlassian/ | 3b9222ab32ef | tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | 1 |
| avinash263/ | aa2b8727f1a6 | tar | 1.34+dfsg-1.2+deb12u1 | 1 |
| avzini/ | f40b30210ed0 | tar | 1.34+dfsg-1.2+deb12u1 | 1 |
| badsmoke/ | c54c004f24cc | tar | 1.30+dfsg-6+deb10u1 | 1 |
| bastilimbach/ | 41b0835ab31e | tar | 1.30+dfsg-6+deb10u1 | 1 |
| bbernhard/ | 549ad08d7e14 | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| beastob/ | a90086a2c53e | tar | 1.30+dfsg-6+deb10u1 | 1 |
| benbusby/ | f77f7e6e4ad2 | tar | 1.30+dfsg-6+deb10u1 | 1 |
| bicarus/ | b1dab0721e1c | tar | 1.30+dfsg-7ubuntu0.20.04.4 | 1 |
| bicarus/ | dab88659ae3b | tar | 1.30+dfsg-6+deb10u1 | 1 |