tar vulnerabilities (TuxCare)
32 vulnerabilities.
-
tarTuxCare Update of tar No score -
tarTuxCare Update of tar No score -
tarTuxCare Update of tar No score -
tarTuxCare Update of tar No score -
tarTuxCare Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape 4.4 Medium -
tarTuxCare Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 4.4 Medium -
tarTuxCare node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection 7.5 High -
tarTuxCare node-tar: Process crash via PAX numeric path type confusion 5.3 Medium -
tarTuxCare node-tar: Negative tar entry size causes infinite loop in archive replace 8.7 High -
tarTuxCare node-tar: Decompression/parse DoS via unlimited input 9.2 Critical -
tarTuxCare Tar: tar: hidden file injection via crafted archives 5.0 Medium -
tarTuxCare node-tar Symlink Path Traversal via Drive-Relative Linkpath 8.2 High -
tarTuxCare node-tar: Hardlink Path Traversal via Drive-Relative Linkpath 8.2 High -
tarTuxCare node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction 7.1 High -
tarTuxCare node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal 8.2 High -
tarTuxCare node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS 8.8 High -
tarTuxCare GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with... 4.1 Medium -
tarTuxCare node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
tarTuxCare In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an... 6.2 Medium -
tarTuxCare GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized... 5.5 Medium -
tarTuxCare Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization 8.2 High -
tarTuxCare Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links 8.2 High -
tarTuxCare Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links 8.2 High -
tarTuxCare Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization 8.2 High -
tarTuxCare Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning 8.2 High -
tarTuxCare Out-of-bounds Read and Missing Release of Memory after Effective Lifetime in tar 3.3 Low -
tarTuxCare node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records 5.3 Medium -
tarTuxCare node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) 6.9 Medium -
tarTuxCare node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization 8.2 High -
tarTuxCare Arbitrary File Overwrite in tar 7.5 High -
tarTuxCare pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing... 7.5 High -
tarTuxCare Symlink Arbitrary File Overwrite in tar 7.5 High