Skip to content
OpenAdvisories

Package · Ubuntu

rust-tar

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-38511

    Links in archive can create arbitrary directories

    An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.

    tar rust-tar rust-tar Debian Ubuntu crates.io
  • High 7.5
    CVE-2018-20990

    Arbitrary file overwrite in tar-rs

    An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive.

    tar rust-tar Ubuntu crates.io