Known vulnerabilities in tar (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
tar (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:tar_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1.16.1-1ubuntu1
1.18-0ubuntu1
1.18-1build1
1.18-2build1
1.18-2ubuntu1.1
1.18-2ubuntu1
1.16-1ubuntu1
1.16-2ubuntu0.1
1.15.91-2ubuntu0.3
1.15.91-2ubuntu0.4
1.15.1-2ubuntu1
1.15.1-2ubuntu2.1
1.15.1-2ubuntu2.2
1.15.1-2ubuntu2.3
1.15.1-2ubuntu2
1.15.1-2ubuntu0.1
1.15.1-2ubuntu0.2
1.14-2ubuntu0.1
1.27.1-1ubuntu0.1+esm7
1.28-2.1ubuntu0.2+esm6
1.29b-2ubuntu0.4+esm4
1.30+dfsg-7ubuntu0.20.04.4+esm3
1.34+dfsg-1ubuntu0.1.22.04.6
1.35+dfsg-3ubuntu0.4
1.35+dfsg-4ubuntu0.4
1.27.1-1ubuntu0.1+esm6
1.28-2.1ubuntu0.2+esm5
1.29b-2ubuntu0.4+esm3
1.30+dfsg-7ubuntu0.20.04.4+esm2
1.35+dfsg-4ubuntu0.3
1.35+dfsg-3ubuntu0.3
1.34+dfsg-1ubuntu0.1.22.04.5
1.34+dfsg-1ubuntu0.1.22.04.4
1.35+dfsg-3ubuntu0.2
1.35+dfsg-4ubuntu0.2
1.27.1-1ubuntu0.1+esm5
1.28-2.1ubuntu0.2+esm4
1.29b-2ubuntu0.4+esm2
1.30+dfsg-7ubuntu0.20.04.4+esm1
1.34+dfsg-1ubuntu0.1.22.04.3
1.35+dfsg-3ubuntu0.1
1.35+dfsg-4ubuntu0.1
1.35+dfsg-3.1build1
1.35+dfsg-3
1.35+dfsg-2~build1
1.35+dfsg-2
1.35+dfsg-1
1.34+dfsg-1build3
1.34+dfsg-1build2
1.34+dfsg-1build1
1.34+dfsg-1.4
1.34+dfsg-1.3
1.34+dfsg-1.3ubuntu1
1.34+dfsg-1.2ubuntu2
1.34+dfsg-1.2ubuntu1
1.34+dfsg-1.2
1.34+dfsg-1
1.34+dfsg-1.1
1.33+dfsg-1
1.32+dfsg-1
1.35+dfsg-3.1
1.35+dfsg-3build1
1.30+dfsg-7ubuntu0.20.04.4
1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1.2ubuntu0.2
1.34+dfsg-1.2ubuntu1.1
1.34+dfsg-1.2ubuntu0.1
Ubuntu Pro
1.29b-2ubuntu0.4
1.30+dfsg-7ubuntu0.20.04.3
1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.10.1
1.26-4ubuntu1.2
1.30+dfsg-7ubuntu0.20.04.1
1.30+dfsg-7ubuntu0.20.10.1
UA Infra or UA Desktop
1.30+dfsg-7ubuntu0.20.04.2
1.29b-2ubuntu0.3
1.29b-2ubuntu0.2
1.28-2.1ubuntu0.2
1.30+dfsg
1.30+dfsg-7
1.29b
1.28
1.27.1
1.26
1.30+dfsg-6
1.30+dfsg-5
1.29b-2ubuntu0.1
1.30+dfsg-3.1
1.30+dfsg-4
1.30+dfsg-3
1.30+dfsg-2
1.30+dfsg-1
1.26+dfsg-0.1
1.26+dfsg-5
1.26+dfsg-6
1.26+dfsg-7
1.26+dfsg-8
1.26+dfsg-9
1.26+dfsg-10
1.29b-2
1.29b-1ubuntu0.1
1.29b-1
1.29b-1.1
1.29-1
1.28-2ubuntu1
1.28-2.2
1.28-2.1ubuntu0.1
1.28-1
1.28-2
1.28-2.1
1.27.1-2
1.27-1
1.27-2
1.27-3
1.27-4
1.27.1-1
1.27.1-1ubuntu0.1
1.11.8-7
1.11.8-8
1.11.8-9
1.11.8-10
1.11.8-11
1.12-1
1.12-2
1.12-3
1.12-4
1.12-5
1.12-6
1.12-7
1.12-8
1.12-9
1.13-1
1.13-2
1.13-3
1.13.6-1
1.13.11-1
1.13.11-2
1.13.14-1
1.13.14-1.1
1.13.14-2
1.13.14-3
1.13.14-4
1.13.14-5
1.13.15-1
1.13.17-1
1.13.17-2
1.13.18-1
1.13.18-2
1.13.19-1
1.13.22-1
1.13.25-1
1.13.25-2
1.13.25-3
1.13.25-4
1.13.25-5
1.13.25-6
1.13.92-1
1.13.92-2
1.13.92-3
1.13.92-4
1.13.92-5
1.13.93-1
1.13.93-2
1.13.93-3
1.13.93-4
1.14-1
1.14-2
1.15.1-1
1.15.1-2
1.15.1-3
1.15.1-4
1.15.1-5
1.15.1-6
1.15.1dfsg-1
1.15.1dfsg-2
1.15.1dfsg-3
1.15.91-1
1.15.91-2
1.16-1
1.16-2
1.16.1-1
1.18-1
1.18-2
1.18-3
1.19-1
1.19-2
1.19-3
1.20-1
1.22-1
1.22-1.1
1.22-2
1.23-1
1.23-2
1.23-2.1
1.23-3
1.23-4
1.24-1
1.25-1
1.25-2
1.25-3
1.26-1
1.26-2
1.26-3
1.26-4
1.26-4ubuntu1
1.26-4ubuntu1.1
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120256 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-45582 |
CWE-22 | Low | 1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2 | 23.12.2025 |
SB2025122320 SB2025122321 SB2026010502 and 19 more |
||
| #VU84035 - Stack-based buffer overflow CVE-2023-39804 |
CWE-121 | High | Ubuntu Pro, 1.30+dfsg-7ubuntu0.20.04.4, 1.34+dfsg-1ubuntu0.1.22.04.2, 1.34+dfsg-1.2ubuntu0.2, 1.34+dfsg-1.2ubuntu1.1 | 11.12.2023 |
SB2023121103 SB2023121110 SB2024010972 and 16 more |
||
| #VU72432 - Heap-based Buffer Overflow CVE-2022-48303 |
CWE-122 | High | Ubuntu Pro, 1.29b-2ubuntu0.4, 1.30+dfsg-7ubuntu0.20.04.3, 1.34+dfsg-1ubuntu0.1.22.04.1, 1.34+dfsg-1ubuntu0.1.22.10.1, 1.34+dfsg-1.2ubuntu0.1 | 21.02.2023 |
SB2023022105 SB2023022111 SB2023022112 and 72 more |
||
| #VU50978 - Missing release of memory after effective lifetime CVE-2021-20193 |
CWE-401 | Medium | UA Infra or UA Desktop, 1.29b-2ubuntu0.3, 1.30+dfsg-7ubuntu0.20.04.2 | 28.02.2021 |
SB2021022807 SB2021022808 SB2021052630 and 9 more |
||
| #VU18058 - NULL Pointer Dereference CVE-2019-9923 |
CWE-476 | Low | 1.26-4ubuntu1.2, 1.28-2.1ubuntu0.2, 1.29b-2ubuntu0.2, 1.30+dfsg-7ubuntu0.20.04.1, 1.30+dfsg-7ubuntu0.20.10.1 | 22.03.2019 |
SB2019032204 SB2019041818 SB2021030306 and 10 more |
||
| #VU16782 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-20482 |
CWE-835 | Low | 1.26-4ubuntu1.2, 1.28-2.1ubuntu0.2, 1.29b-2ubuntu0.2, 1.30+dfsg-7ubuntu0.20.04.1, 1.30+dfsg-7ubuntu0.20.10.1 | 02.01.2019 |
SB2018122607 SB2019010801 SB2019041818 and 8 more |