CVE-2006-0300
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of...
CVE-2006-0300 is a medium vulnerability (CVSS 5.1) in Gnu Tar, published February 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.18%, the 92nd percentile. Fixed in tar 1.15.1-3.
- Severity
- 5.1 MediumCVSS 2.0, NVD
- Exploit chance
- 5.18%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.15.1-3tar +12 more
Description
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tarDebian:12 | before 1.15.1-3 | 1.15.1-3 |
tarDebian:13 | before 1.15.1-3 | 1.15.1-3 |
tarDebian:14 | before 1.15.1-3 | 1.15.1-3 |
tarDebian:3.1 | before 1.14-2.1, plus listed versions 1.14-2 | 1.14-2.1 |
tarRed Hat:enterprise_linux:4::as | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
tar-debuginfoRed Hat:enterprise_linux:4::as | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
tarRed Hat:enterprise_linux:4::desktop | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
tar-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
tarRed Hat:enterprise_linux:4::es | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
tar-debuginfoRed Hat:enterprise_linux:4::es | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
tarRed Hat:enterprise_linux:4::ws | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
tar-debuginfoRed Hat:enterprise_linux:4::ws | before 0:1.14-9.RHEL4 | 0:1.14-9.RHEL4 |
taropenSUSE:Tumbleweed From an advisory covering 7 CVEs | before 1.34-2.2 | 1.34-2.2 |
What each source reports
NVD Score used
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
- Record
CVE-2006-0300- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
- Record
CVE-2006-0300- Updated
- 2026-11-02
EUVDEUVD-2006-0307No score
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
- Record
EUVD-2006-0307- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v2qx-rhmh-m93wNo score
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of...
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
- Record
GHSA-v2qx-rhmh-m93w- Updated
- 2026-11-02
OSVNo score
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
- Record
CVE-2006-0300- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-0300No score
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
- Record
DEBIAN-CVE-2006-0300- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11422-1No score
tar-1.34-2.2 on GA media
These are all security issues fixed in the tar-1.34-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11422-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
trustix.org/errata/2006/0010
securityfocus.com/archive/1/430299/100/0/threaded
securitytracker.com/id?1015705
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978
secunia.com/advisories/18999
Show 54 moreShow less
novell.com/linux/security/advisories/2006_05_sr.html
us-cert.gov/cas/techalerts/TA07-072A.html
openpkg.org/security/OpenPKG-SA-2006.006-tar.html
usn.ubuntu.com/257-1
osvdb.org/23371
lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
debian.org/security/2006/dsa-987
redhat.com/support/errata/RHSA-2006-0232.html
docs.info.apple.com/article.html?artnum=305391
securityreason.com/securityalert/543
wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046
lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html
sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1
vupen.com/english/advisories/2008/2518
exchange.xforce.ibmcloud.com/vulnerabilities/24855
gentoo.org/security/en/glsa/glsa-200603-06.xml
nvd.nist.gov/vuln/detail/CVE-2006-0300
github.com/advisories/GHSA-v2qx-rhmh-m93w
security-tracker.debian.org/tracker/CVE-2006-0300
access.redhat.com/errata/RHSA-2006:0232
bugzilla.redhat.com/show_bug.cgi?id=181772
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0232.json
cve.org/CVERecord?id=CVE-2006-0300
suse.com/security/cve/CVE-2001-1267