pkg:Debian/tar

所有已知漏洞

• HIGH7.5CVE-2019-9923pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed exten…
  from 0, < 1.32+dfsg-1
• HIGH7.5CVE-2016-6321tar - security update
  from 0, < 1.29b-1.1
• HIGH7.5CVE-2016-6321tar - security update
  from 0, < 1.26+dfsg-0.1+deb7u1
• HIGH7.5CVE-2016-6321tar - security update
  from 0, < 1.27.1-2+deb8u1
• MEDIUM6.2CVE-2023-39804tar - security update
  from 0, < 1.30+dfsg-6+deb10u1
• MEDIUM6.2CVE-2023-39804tar - security update
  from 0, < 1.34+dfsg-1+deb11u1
• MEDIUM5.5CVE-2026-5704A flaw was found in tar.
  from 0
• MEDIUM5.5CVE-2022-48303GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.
  from 0, < 1.34+dfsg-1+deb11u1
• MEDIUM4.7CVE-2018-20482tar - security update
  from 0, < 1.27.1-2+deb8u2
• MEDIUM4.7CVE-2018-20482tar - security update
  from 0, < 1.30+dfsg-3.1
• MEDIUM4.7CVE-2018-20482tar - security update
  from 0, < 1.29b-1.1+deb9u1
• LOW3.3CVE-2021-20193A flaw was found in the src/list.c of tar 1.33 and earlier.
  from 0, < 1.34+dfsg-1
• —CVE-2010-0624Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio…
  from 0, < 1.23-1
• —CVE-2007-4476cpio - programming error
  from 0, < 1.18-1
• —CVE-2007-4131tar
  from 0, < 1.16-2etch1
• —CVE-2007-4131tar
  from 0, < 1.18-2
• —CVE-2006-6097tar
  from 0, < 1.14-2.3
• —CVE-2006-6097tar
  from 0, < 1.16-2
• —CVE-2006-0300tar - buffer overflow
  from 0, < 1.15.1-3
• —CVE-2006-0300tar - buffer overflow
  from 0, < 1.14-2.1
• —CVE-2005-1918The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect…
  from 0, < 1.14-2.2
• —CVE-2005-2541Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain…
  from 0
• —CVE-2002-1216GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result…
  from 0, < 1.13.25