Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu tar 1.14 vulnerabilities and exploits

(subscribe to this query)
454
VMScore
CVE-2006-0300
Buffer overflow in tar 1.14 up to and including 1.15.90 allows user-assisted malicious users to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
Gnu Tar 1.14.1Gnu Tar 1.15Gnu Tar 1.15.1Gnu Tar 1.15.90Gnu Tar 1.14
605
VMScore
CVE-2007-4131
Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote malicious users to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
Gnu Tar 1.13.19Gnu Tar 1.13.25Gnu Tar 1.15.91Gnu Tar 1.16Gnu Tar 1.13Gnu Tar 1.13.5Gnu Tar 1.14Gnu Tar 1.13.16Gnu Tar 1.13.17Gnu Tar 1.13.18Gnu Tar 1.15.1Gnu Tar 1.15.90Gnu Tar 1.13.11Gnu Tar 1.13.14Gnu Tar 1.14.90Gnu Tar 1.15
446
VMScore
CVE-2016-6321
Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 up to and including 1.29 might allow remote malicious users to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name pa...
Gnu Tar 1.26Gnu Tar 1.27.1Gnu Tar 1.23Gnu Tar 1.29Gnu Tar 1.25Gnu Tar 1.22Gnu Tar 1.18Gnu Tar 1.19Gnu Tar 1.20Gnu Tar 1.17Gnu Tar 1.27Gnu Tar 1.15.90Gnu Tar 1.16Gnu Tar 1.28Gnu Tar 1.14Gnu Tar 1.24Gnu Tar 1.15.91Gnu Tar 1.15Gnu Tar 1.15.1Gnu Tar 1.21Gnu Tar 1.16.1
605
VMScore
CVE-2010-0624
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar prior to 1.23 and GNU cpio prior to 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending mor...
Gnu Tar 1.13.16Gnu Tar 1.13.17Gnu Tar 1.14.90Gnu Tar 1.15Gnu Tar 1.18Gnu Tar 1.17Gnu Cpio 2.5Gnu Cpio 2.5.90Gnu Tar 1.13.11Gnu Tar 1.13.14Gnu Tar 1.14Gnu Tar 1.14.1Gnu Tar 1.20Gnu Tar 1.19Gnu Cpio 1.3Gnu Cpio 2.4-2Gnu TarGnu CpioGnu Tar 1.13.18Gnu Tar 1.13.19Gnu Tar 1.15.1Gnu Tar 1.15.90
405
VMScore
CVE-2006-6097
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted malicious users to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract...
Gnu Tar 1.16Gnu Tar 1.15.1
755
VMScore
CVE-2007-4476
Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
Gnu TarDebian Debian Linux 3.1Debian Debian Linux 4.0Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 7.10
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook