GNU tar 1.13.25
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:tar:1.13.25:*:*:*:*:*:*:*
part: a version: 1.13.25 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Tar (d1d14819-0b0a-5f64-94cf-3783967b2df6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/tar |
purl2cpe | 2026-06-01 10:11:53.235158 |
pkg:deb/ubuntu/tar |
purl2cpe | 2026-06-01 10:11:53.235159 |
pkg:github/distrotech/tar |
purl2cpe | 2026-06-01 10:11:53.235161 |
pkg:gitlab/redhat/tar |
purl2cpe | 2026-06-01 10:11:53.235162 |
pkg:gnu/tar |
purl2cpe | 2026-06-01 10:11:53.235164 |
pkg:rpm/centos/tar |
purl2cpe | 2026-06-01 10:11:53.235165 |
pkg:rpm/fedora/tar |
purl2cpe | 2026-06-01 10:11:53.235167 |
pkg:rpm/opensuse/tar |
purl2cpe | 2026-06-01 10:11:53.235168 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-0624 |
vulnerable | 2026-06-08 04:52:03.619640 |
Details available
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
Published: 2010-03-12T20:00:00.000Z
Updated: 2024-08-07T00:52:19.781Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4131 |
vulnerable | 2026-06-08 04:49:55.760663 |
Details available
Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
Published: 2007-08-25T00:00:00.000Z
Updated: 2024-08-07T14:46:38.940Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1918 |
vulnerable | 2026-06-08 04:48:27.879778 |
Details available
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
Published: 2006-02-21T19:00:00.000Z
Updated: 2024-08-07T22:06:57.773Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0399 |
vulnerable | 2026-06-08 04:46:21.356517 |
Details available
Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267.
Published: 2002-10-01T04:00:00.000Z
Updated: 2024-08-08T02:49:28.480Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.