TA
Product
Tar
20
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 7Low 1
Watch
Add Tar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-9923 | 7.5 | Mar 22 | pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers Affected: before 1.32 |
| CVE-2016-6321 | 7.5 | Dec 9 | Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write… Affected: 1.14; 1.15; 1.15.1; 1.15.90; 1.15.91; 1.16; +15 more |
Showing 2