GNU tar 1.13.14
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:tar:1.13.14:*:*:*:*:*:*:*
part: a version: 1.13.14 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Tar (d1d14819-0b0a-5f64-94cf-3783967b2df6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/tar |
purl2cpe | 2026-06-01 10:11:53.235093 |
pkg:deb/ubuntu/tar |
purl2cpe | 2026-06-01 10:11:53.235095 |
pkg:github/distrotech/tar |
purl2cpe | 2026-06-01 10:11:53.235096 |
pkg:gitlab/redhat/tar |
purl2cpe | 2026-06-01 10:11:53.235098 |
pkg:gnu/tar |
purl2cpe | 2026-06-01 10:11:53.235099 |
pkg:rpm/centos/tar |
purl2cpe | 2026-06-01 10:11:53.235101 |
pkg:rpm/fedora/tar |
purl2cpe | 2026-06-01 10:11:53.235102 |
pkg:rpm/opensuse/tar |
purl2cpe | 2026-06-01 10:11:53.235104 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-0624 |
vulnerable | 2026-06-08 04:52:03.617108 |
Details available
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
Published: 2010-03-12T20:00:00.000Z
Updated: 2024-08-07T00:52:19.781Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4131 |
vulnerable | 2026-06-08 04:49:55.758002 |
Details available
Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
Published: 2007-08-25T00:00:00.000Z
Updated: 2024-08-07T14:46:38.940Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.