CVE-2023-38346

Summary

CVE-2023-38346 is a vulnerability affecting Wind River VxWorks 6.9 and 7. The "tarExtract" function, which is used for TAR file extraction, can lead to unexpected behavior due to improper handling of absolute and relative file paths. While developers may anticipate that the function will stop processing or strip leading slashes from absolute paths, this may not always occur. This can result in directory traversal and potentially unwanted consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.