tar vulnerabilities (Debian)
17 vulnerabilities.
-
tarDebian Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape 4.4 Medium -
tarDebian Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 4.4 Medium -
tarDebian Tar: tar: hidden file injection via crafted archives 5.0 Medium -
tarDebian In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an... 6.2 Medium -
tarDebian GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized... 5.5 Medium -
tarDebian Out-of-bounds Read and Missing Release of Memory after Effective Lifetime in tar 3.3 Low -
tarDebian pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing... 7.5 High -
tarDebian GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which... 4.7 Medium -
tarDebian Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29... 7.5 High -
tarDebian Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client... 6.8 Medium -
tarDebian Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and... 7.5 High -
tarDebian Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar... 6.8 Medium -
tarDebian GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite... 4.0 Medium -
tarDebian Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of... 5.1 Medium -
tarDebian The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat... 2.6 Low -
tarDebian Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may... 10.0 High -
tarDebian GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary... 5.0 Medium