Description
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
Remediation
References
Related Vulnerabilities
WordPress Plugin DSubscribers SQL Injection (1.2)
MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4302)
WordPress Plugin post-views Cross-Site Scripting (2.6.1.1)
Perl Numeric Errors Vulnerability (CVE-2013-7422)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0837)