Product by GNU
GNU Tar
20 known vulnerabilities in GNU Tar (GNU), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2016-6321 | GNU Tar: Path Traversal | 7.5 | |
| High | CVE-2019-9923 | GNU Tar: NULL Pointer Dereference | 7.5 | |
| Not rated | CVE-2007-4476 | GNU Tar: Buffer Overflow | — | |
| Not rated | CVE-2006-6097 | GNU Tar: security vulnerability | — | |
| Medium | CVE-2022-48303 | GNU Tar: Out-of-Bounds Read | 5.5 | |
| Not rated | CVE-2006-0300 | GNU Tar: Buffer Overflow | — | |
| Not rated | CVE-2010-0624 | GNU Tar: Heap-Based Buffer Overflow | — | |
| Not rated | CVE-2005-2541 | GNU Tar: Privilege Escalation | — | |
| Not rated | CVE-2002-0399 | GNU Tar: Path Traversal | — | |
| Medium | CVE-2026-5704 | Tar: tar: hidden file injection via crafted archives | 5.0 | |
| Not rated | CVE-2005-1918 | GNU Tar: Path Traversal | — | |
| Not rated | CVE-2007-4131 | GNU Tar: Path Traversal | — | |
| Low | CVE-2021-20193 | Tar: Missing Release of Memory after Effective Lifetime | 3.3 | |
| Not rated | CVE-2002-1216 | GNU Tar: security vulnerability | — | |
| Medium | CVE-2026-18508 | Red Hat: Link Following | 4.4 | |
| Medium | CVE-2026-18477 | Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape | 4.4 | |
| Medium | CVE-2025-45582 | GNU Tar: Path Traversal: '../filedir' | 4.1 | |
| Medium | CVE-2023-39804 | GNU Tar: security vulnerability | 6.2 | |
| Medium | CVE-2018-20482 | GNU Tar: Denial of Service | 4.7 | |
| Not rated | CVE-2001-1267 | GNU Tar: Path Traversal | — |