Gnu Tar vulnerabilities

• gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape CVE-2026-18477 Fix available 4.4 MediumAugust 3, 2026
• gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite CVE-2026-18508 Fix available 4.4 MediumAugust 3, 2026
• gnu tar, red hat discovery 2, enterprise linux 10 +7 more +9 more Tar: tar: hidden file injection via crafted archives CVE-2026-5704 Fix available 5.0 MediumApril 6, 2026
• gnu tar GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with... CVE-2025-45582 Fix available 4.1 MediumJuly 11, 2025
• gnu tar In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an... CVE-2023-39804 Fix available 6.2 MediumNovember 30, 2023
• gnu tar, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized... CVE-2022-48303 Fix available 5.5 MediumJanuary 30, 2023
• gnu tar, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Out-of-bounds Read and Missing Release of Memory after Effective Lifetime in tar CVE-2021-20193 Fix available 3.3 LowMarch 26, 2021
• gnu tar, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing... CVE-2019-9923 Fix available 7.5 HighMarch 22, 2019
• gnu tar, debian linux, opensuse leap +3 more +5 more GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which... CVE-2018-20482 Fix available 4.7 MediumDecember 26, 2018
• gnu tar Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29... CVE-2016-6321 Fix available EPSS 15.7% 7.5 HighOctober 28, 2016
• gnu cpio, tar +1 more Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client... CVE-2010-0624 Fix available 6.8 MediumMarch 12, 2010
• gnu tar, canonical ubuntu linux, debian linux +2 more Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and... CVE-2007-4476 Public exploitFix available EPSS 14.9% 7.5 HighSeptember 5, 2007
• gnu tar Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar... CVE-2007-4131 Fix available 6.8 MediumAugust 25, 2007
• gnu tar GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite... CVE-2006-6097 Public exploitFix available EPSS 11.7% 4.0 MediumNovember 24, 2006
• gnu tar Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of... CVE-2006-0300 Fix available 5.1 MediumFebruary 24, 2006
• gnu tar, redhat enterprise linux, enterprise linux desktop +1 more +3 more The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat... CVE-2005-1918 Fix available 2.6 LowDecember 31, 2005
• gnu tar Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may... CVE-2005-2541 Fix available 10.0 HighAugust 10, 2005
• gnu tar GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary... CVE-2002-1216 Fix available 5.0 MediumOctober 21, 2002
• gnu tar Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions... CVE-2002-0399 Fix available 5.0 MediumOctober 1, 2002
• gnu tar Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite... CVE-2001-1267 Fix available 2.1 LowJuly 12, 2001