CVE-2019-9923

CVE-2019-9923 : pax_decode_header in GNU Tar’s sparse.c can dereference a NULL pointer when parsing archives with malformed extended headers, leading to a crash. Affected: GNU Tar prior to 1.32. Impact stated in sources is a NULL pointer dereference (DoS via crash) with CVSS v3.1 base 7.5 (HIGH)....

CVE-2016-6321

CVE-2016-6321 is a directory traversal vulnerability in GNU tar (safer_name_suffix) affecting tar 1.14–1.29. An attacker could bypass path sanitization and overwrite arbitrary files when extracting archives, via crafted file names (aka POINTYFEATHER). The issue is triggered by how tar removes off...

CVE-2007-4476

CVE-2007-4476 is a buffer overflow in the safer_name_suffix function of GNU tar that exposes a crashing stack. The supplied connected documents corroborate the issue within tar/cpio track records and list it alongside other related CVEs (e.g., CVE-2010-0624); no explicit patch versions or remedia...