tar vulnerabilities (Red Hat)

11 vulnerabilities.

• tar Red Hat Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape CVE-2026-18477 Fix available 4.4 MediumAugust 3, 2026
• tar Red Hat Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite CVE-2026-18508 Fix available 4.4 MediumAugust 3, 2026
• tar Red Hat Tar: tar: hidden file injection via crafted archives CVE-2026-5704 Fix available 5.0 MediumApril 6, 2026
• tar Red Hat GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with... CVE-2025-45582 Fix available 4.1 MediumJuly 11, 2025
• tar Red Hat GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized... CVE-2022-48303 Fix available 5.5 MediumJanuary 30, 2023
• tar Red Hat Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client... CVE-2010-0624 Fix available 6.8 MediumMarch 12, 2010
• tar Red Hat Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and... CVE-2007-4476 Public exploitFix available EPSS 14.9% 7.5 HighSeptember 5, 2007
• tar Red Hat Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar... CVE-2007-4131 Fix available 6.8 MediumAugust 25, 2007
• tar Red Hat GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite... CVE-2006-6097 Public exploitFix available EPSS 11.7% 4.0 MediumNovember 24, 2006
• tar Red Hat Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of... CVE-2006-0300 Fix available 5.1 MediumFebruary 24, 2006
• tar Red Hat The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat... CVE-2005-1918 Fix available 2.6 LowDecember 31, 2005