Known vulnerabilities in Tar

Vendor: GNU
Software: Tar
Software CPE: cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*
Website: https://www.gnu.org/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tar Tar is affected by 8 known vulnerabilities: 3 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120256 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-45582		 CWE-22 Low
No
No
 - 23.12.2025 SB2025122320
SB2025122321
SB2026010502
and 19 more
#VU93014 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2001-1267		 CWE-22 High
No
No
 1.13.25 21.06.2024 SB2001071201
SB2024062139
SB2024110188
and 8 more
#VU84035 - Stack-based buffer overflow
CVE-2023-39804		 CWE-121 High
No
No
 1.35 11.12.2023 SB2023121103
SB2023121110
SB2024010972
and 16 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303		 CWE-122 High
No
No
 - 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU50978 - Missing release of memory after effective lifetime
CVE-2021-20193		 CWE-401 Medium
No
No
 1.34 28.02.2021 SB2021022807
SB2021022808
SB2021052630
and 9 more
#VU18058 - NULL Pointer Dereference
CVE-2019-9923		 CWE-476 Low
No
No
 1.32 22.03.2019 SB2019032204
SB2019041818
SB2021030306
and 10 more
#VU16782 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-20482		 CWE-835 Low
No
No
 1.31 02.01.2019 SB2018122607
SB2019010801
SB2019041818
and 8 more
#VU32213 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-6321		 CWE-22 Medium
No
No
 1.30 10.12.2016 SB2016121010
SB2016110131
SB2016110323
and 1 more