pkg:Debian/tar

23 total CVEsHIGH4MEDIUM7LOW1

✅ Check your installed version

All known vulnerabilities

  • HIGH7.5CVE-2019-9923pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed exten…
    from 0, < 1.32+dfsg-1
  • HIGH7.5CVE-2016-6321tar - security update
    from 0, < 1.29b-1.1
  • HIGH7.5CVE-2016-6321tar - security update
    from 0, < 1.26+dfsg-0.1+deb7u1
  • HIGH7.5CVE-2016-6321tar - security update
    from 0, < 1.27.1-2+deb8u1
  • MEDIUM6.2CVE-2023-39804tar - security update
    from 0, < 1.30+dfsg-6+deb10u1
  • MEDIUM6.2CVE-2023-39804tar - security update
    from 0, < 1.34+dfsg-1+deb11u1
  • MEDIUM5.5CVE-2026-5704A flaw was found in tar.
    from 0
  • MEDIUM5.5CVE-2022-48303GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.
    from 0, < 1.34+dfsg-1+deb11u1
  • MEDIUM4.7CVE-2018-20482tar - security update
    from 0, < 1.27.1-2+deb8u2
  • MEDIUM4.7CVE-2018-20482tar - security update
    from 0, < 1.30+dfsg-3.1
  • MEDIUM4.7CVE-2018-20482tar - security update
    from 0, < 1.29b-1.1+deb9u1
  • LOW3.3CVE-2021-20193A flaw was found in the src/list.c of tar 1.33 and earlier.
    from 0, < 1.34+dfsg-1
  • —CVE-2010-0624Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio…
    from 0, < 1.23-1
  • —CVE-2007-4476cpio - programming error
    from 0, < 1.18-1
  • —CVE-2007-4131tar
    from 0, < 1.16-2etch1
  • —CVE-2007-4131tar
    from 0, < 1.18-2
  • —CVE-2006-6097tar
    from 0, < 1.14-2.3
  • —CVE-2006-6097tar
    from 0, < 1.16-2
  • —CVE-2006-0300tar - buffer overflow
    from 0, < 1.15.1-3
  • —CVE-2006-0300tar - buffer overflow
    from 0, < 1.14-2.1
  • —CVE-2005-1918The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect…
    from 0, < 1.14-2.2
  • —CVE-2005-2541Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain…
    from 0
  • —CVE-2002-1216GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result…
    from 0, < 1.13.25