Known vulnerabilities in tar (Alpine package)

Vendor: Alpine Linux Development Team
Software: tar (Alpine package)
Software CPE: cpe:2.3:o:alpine:tar_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tar (Alpine package) tar (Alpine package) is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16782 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-20482		 CWE-835 Low
No
No
 1.31-r0 02.01.2019 SB2018122607
SB2019010801
SB2019041818
and 8 more
#VU32213 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-6321		 CWE-22 Medium
No
No
 1.28-r1, 1.28-r2 10.12.2016 SB2016121010
SB2016110131
SB2016110323
and 1 more