Skip to content
OpenAdvisories
Unscored DSA-1438-1 2 CVEs

tar

Published Dec 28, 2007 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 tar 1.14-2.4
Debian · 4.0 tar 1.16-2etch1

Vulnerabilities 2

  • Unscored —

    Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remot…

  • Unscored —
    CVE-2007-4476 Public exploit EPSS 15%

    Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a …