[{"CVE":"CVE-2013-4397","severity":"moderate","public_date":"2013-10-09T00:00:00Z","advisories":["RHSA-2013:1418"],"bugzilla":"1014492","bugzilla_description":"CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtar-0:1.2.11-17.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4397.json"},{"CVE":"CVE-2013-4420","severity":"low","public_date":"2013-10-01T00:00:00Z","advisories":[],"bugzilla":"1018150","bugzilla_description":"CVE-2013-4420 libtar: missing validation of file names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4420.json"}]