PT-2016-3297 · Gnu +3 · Gnu Tar +3

🗓️ 09 Oct 2015 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 3 Views

GNU tar 1.14–1.29 directory traversal via unsafe file name; upgrade to fixed version and restrict access.

Reporter	Title	Published	Views	Family All 228
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by tar vulnerabilities (CVE-2010-0624 CVE-2016-6321)	18 Jun 201801:35	–	ibm
ALT Linux	Security fix for the ALT Linux 8 package tar version 1.29.0.19.d061-alt1	28 Mar 201700:00	–	altlinux
AlpineLinux	CVE-2016-6321	9 Dec 201622:00	–	alpinelinux
ArchLinux	[ASA-201611-11] tar: arbitrary file overwrite	3 Nov 201600:00	–	archlinux
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html
errata	www.errata.altlinux.org/ALT-PU-2017-1324
ubuntu	www.ubuntu.com/security/CVE-2016-6321
errata	www.errata.altlinux.org/ALT-PU-2015-1845
osv	www.osv.dev/vulnerability/SUSE-SU-2016:2895-1
advisories	www.advisories.mageia.org/MGASA-2016-0386.html
bdu	www.bdu.fstec.ru/vul/2019-03749
lists	www.lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html
security-tracker	www.security-tracker.debian.org/tracker/DSA-3702-1
ubuntu	www.ubuntu.com/security/notices/USN-3132-1

06 Aug 2025 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 26.8 - 7.8

CVSS 37.5

CVSS 3.17.5

EPSS0.15155

SSVC