GNU / Tar

20 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	MEDIUM	4.4	Aug 3, 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	MEDIUM	4.4	Aug 3, 2026
CVE-2026-5704	Tar: tar: hidden file injection via crafted archives	MEDIUM	5.5	Apr 6, 2026
CVE-2025-45582	tar: Tar path traversal	MEDIUM	5.6	Jul 11, 2025
CVE-2023-39804	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash	MEDIUM	6.2	Mar 27, 2024
CVE-2022-48303	tar: heap buffer overflow at from_header() in list.c via specially crafted checksum	MEDIUM	5.5	Jan 30, 2023
CVE-2021-20193	tar: Memory leak in read_header() in list.c	LOW	3.3	Mar 26, 2021
CVE-2019-9923	tar: null-pointer dereference in pax_decode_header in sparse.c	HIGH	7.5	Mar 22, 2019
CVE-2018-20482	tar: Infinite read loop in sparse_dump_region function in sparse.c	MEDIUM	4.7	Dec 26, 2018
CVE-2016-6321	tar: Bypassing the extract path name	HIGH	7.5	Dec 9, 2016
CVE-2010-0624	cpio: Heap-based buffer overflow by expanding a specially-crafted archive	MEDIUM	6.8	Mar 12, 2010
CVE-2007-4476	tar/cpio stack crashing in safer_name_suffix	HIGH	7.5	Sep 5, 2007
CVE-2007-4131	tar directory traversal vulnerability	MEDIUM	6.8	Aug 25, 2007
CVE-2006-6097	security flaw	MEDIUM	4.0	Nov 24, 2006
CVE-2006-0300	security flaw	MEDIUM	5.1	Feb 24, 2006
CVE-2005-1918	tar archive path traversal issue	LOW	2.6	Feb 21, 2006
CVE-2005-2541	tar: does not properly warn the user when extracting setuid or setgid files	HIGH	7.0	Aug 10, 2005
CVE-2001-1267	security flaw	LOW	2.1	Sep 1, 2004
CVE-2002-1216	security flaw	MEDIUM	5.0	Oct 21, 2002
CVE-2002-0399	security flaw	MEDIUM	5.0	Oct 1, 2002

Rows per page

Showing 1 to 20 of 20 CVEs