[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsazZN9yhsKaZZELSJVK3dWqlACY0Yd5BsQ0bTzbhiaY":3,"g5a-risk:CVE-2019-9923":159},{"success":4,"data":5,"meta":157},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":47,"epssPercentile":25,"epssTimeSeries":48,"severity":50,"affectedProducts":51,"affectedProductsCount":62,"references":63,"referencesCount":104,"weaknesses":105,"weaknessesCount":113,"isActivelyExploited":46,"cisaInfo":25,"otxData":25,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":155,"notableEvents":156},"CVE-2019-9923","What is CVE-2019-9923?","pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.","2019-03-22T08:29:00.247","2025-08-06T22:15:28.757",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":35,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[29],{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":33,"VectorString":34,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[36],{"Source":30,"Type":31,"CVSSData":37,"BaseSeverity":43,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":46,"ObtainAllPrivilege":46,"ObtainUserPrivilege":46,"ObtainOtherPrivilege":46,"UserInteractionRequired":46},{"Version":38,"VectorString":39,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"","MEDIUM",10,2.9,false,0.03126,[49,49,49,47,47,47,47],0.03028,"High",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"gnu","tar","*","cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"opensuse","leap","15.0","cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",2,[64,71,76,80,85,89,92,94,96,98,100,102],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fgit.savannah.gnu.org\u002Fcgit\u002Ftar.git\u002Fcommit\u002F?id=cb07844454d8cc9fb21f53ace75975f91185a120","Gnu",[68,69,70],"Mailing List","Patch","Vendor Advisory",{"url":72,"source":73,"tags":74},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00077.html","Opensuse",[68,75],"Third Party Advisory",{"url":77,"source":66,"tags":78},"http:\u002F\u002Fsavannah.gnu.org\u002Fbugs\u002F?55369",[79,75],"Permissions Required",{"url":81,"source":82,"tags":83},"https:\u002F\u002Fbugs.launchpad.net\u002Fubuntu\u002F+source\u002Ftar\u002F+bug\u002F1810241","Launchpad",[84,69,75],"Issue Tracking",{"url":86,"source":87,"tags":88},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","Apache",[],{"url":90,"source":87,"tags":91},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",[],{"url":65,"source":66,"tags":93},[68,69,70],{"url":72,"source":73,"tags":95},[68,75],{"url":77,"source":66,"tags":97},[79,75],{"url":81,"source":82,"tags":99},[84,69,75],{"url":86,"source":87,"tags":101},[],{"url":90,"source":87,"tags":103},[],12,[106],{"id":107,"name":108,"description":109,"extendedDescription":42,"status":110,"abstraction":111,"structure":112},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","Stable","Base","Simple",1,[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2019-9923? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-9923, a high severity cyber security vulnerability from 2019. pax_decode_header in sparse.c in GNU Tar before 1.32 had a N...","CVE-2019-9923, CVE-2019-9923 vulnerability, CVE-2019-9923 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, gnu security, opensuse security, tar vulnerability, leap vulnerability","\u002Fwhat-is\u002Fcve-2019-9923",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":9,"dateModified":10,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-9923","Cybersecurity","CVE-2019-9923, CVE-2019-9923 vulnerability, CVE-2019-9923 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141,149],{"Operator":25,"Negate":25,"Nodes":142},[143],{"Operator":144,"Negate":46,"CPEMatch":145},"OR",[146],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":147,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":148,"VersionEndIncluding":25},"865A017E-B434-4CAE-8074-CD652CB2C13F","1.32",{"Operator":25,"Negate":25,"Nodes":150},[151],{"Operator":144,"Negate":46,"CPEMatch":152},[153],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":154,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F1E78106-58E6-4D59-990F-75DA575BFAD9",[],[],{"lastModified":10,"cacheTime":158,"version":38},1792367826523,{"score":160,"band":161,"action":162,"scoredAt":163},48,"Medium","Plan remediation","2026-10-16T06:45:48.716641+00:00"]