USN-7398-1: libtar vulnerabilities

It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service, or execute arbitrary code. CVE-2021-33643, CVE-2021-33644 It was discovered that libtar...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : libtar vulnerabilities (USN-7398-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7398-1 advisory. It was discovered that libtar may perform out-of-bounds reads when processing specially crafted t...

Debian: Security Advisory (DLA-4033-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4033-1] libtar security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4033-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 28, 2025 https://wiki.debian.org/LTS -...

Debian dla-4033 : libtar-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4033 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4033-1 [email protected]...

DLA-4033-1 libtar - security update

Bulletin has no description...

Critical Photon OS Security Update - PHSA-2024-5.0-0424

Updates of 'unzip', 'libksba', 'patch', 'util-linux', 'libtar' packages of Photon OS have been released...

Fedora 37 : libtar (2022-88772d0a2d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-88772d0a2d advisory. - fix use-after-free bugs introduced by incorrect memleak fixes CVE-2021-33640 Tenable has extracted the preceding description block directly from t...

RHSA-2023:2898 Red Hat Security Advisory: libtar security update

Bulletin has no description...

RHSA-2013:1418 Red Hat Security Advisory: libtar security update

Bulletin has no description...

Photon OS 3.0: Libtar PHSA-2022-3.0-0437

An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0437. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libtar PHSA-2023-5.0-0010

An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libtar PHSA-2022-4.0-0231

An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0231. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33646)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33646 advisory. - The thread function doesn't free a variable t-thbuf.gnulongname after allocating memory, which may cause a...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33643)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33643 advisory. - An attacker who submits a crafted tar file with size in header struct being 0 May be able to trigger an...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33644)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33644 advisory. - An attacker who submits a crafted tar file with size in header struct being 0 May be able to trigger an...

CBL Mariner 2.0 Security Update: libtar (CVE-2021-33645)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33645 advisory. - The thread function doesn't free a variable t-thbuf.gnulonglink after allocating memory, which may cause a...

CBL Mariner 2.0 Security Update: libtar (CVE-2013-4420)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2013-4420 advisory. - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar...

RHEL 6 : libtar (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtar: missing validation of file names CVE-2013-4420 Note that Nessus has not tested for this issue but has inste...

RHEL 7 : libtar (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtar: missing validation of file names CVE-2013-4420 Note that Nessus has not tested for this issue but has inste...