Known vulnerabilities in tar (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:tar_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tar (Ubuntu package) tar (Ubuntu package) is affected by 6 known vulnerabilities: 2 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120256 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-45582
CWE-22 Low
No
No
1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2 23.12.2025 SB2025122320
SB2025122321
SB2026010502
and 19 more
#VU84035 - Stack-based buffer overflow
CVE-2023-39804
CWE-121 High
No
No
Ubuntu Pro, 1.30+dfsg-7ubuntu0.20.04.4, 1.34+dfsg-1ubuntu0.1.22.04.2, 1.34+dfsg-1.2ubuntu0.2, 1.34+dfsg-1.2ubuntu1.1 11.12.2023 SB2023121103
SB2023121110
SB2024010972
and 16 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303
CWE-122 High
No
No
Ubuntu Pro, 1.29b-2ubuntu0.4, 1.30+dfsg-7ubuntu0.20.04.3, 1.34+dfsg-1ubuntu0.1.22.04.1, 1.34+dfsg-1ubuntu0.1.22.10.1, 1.34+dfsg-1.2ubuntu0.1 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU50978 - Missing release of memory after effective lifetime
CVE-2021-20193
CWE-401 Medium
No
No
UA Infra or UA Desktop, 1.29b-2ubuntu0.3, 1.30+dfsg-7ubuntu0.20.04.2 28.02.2021 SB2021022807
SB2021022808
SB2021052630
and 9 more
#VU18058 - NULL Pointer Dereference
CVE-2019-9923
CWE-476 Low
No
No
1.26-4ubuntu1.2, 1.28-2.1ubuntu0.2, 1.29b-2ubuntu0.2, 1.30+dfsg-7ubuntu0.20.04.1, 1.30+dfsg-7ubuntu0.20.10.1 22.03.2019 SB2019032204
SB2019041818
SB2021030306
and 10 more
#VU16782 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-20482
CWE-835 Low
No
No
1.26-4ubuntu1.2, 1.28-2.1ubuntu0.2, 1.29b-2ubuntu0.2, 1.30+dfsg-7ubuntu0.20.04.1, 1.30+dfsg-7ubuntu0.20.10.1 02.01.2019 SB2018122607
SB2019010801
SB2019041818
and 8 more