How many gnu tar CVEs are in CISA KEV?

None of gnu tar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for gnu tar vulnerabilities?

Yes — 6 of gnu tar's CVEs have a known public exploit.

Which versions of gnu tar are affected?

102 distinct gnu tar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in gnu tar CVEs?

gnu tar's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-24 (Path Traversal: '../filedir'), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition).

How many critical gnu tar vulnerabilities are there?

gnu tar has 1 critical and 3 high-severity CVEs.

What is the average severity of gnu tar CVEs?

The average CVSS base score across gnu tar's scored CVEs is 5.4.

gnu tar Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: gnu tar vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

gnu tar Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

gnu tar has 20 published CVE records since 2002, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 5.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting gnu tar, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include enterprise linux, enterprise linux desktop, rpath linux.

Severity and exploitation

How the CVSS severity of gnu tar's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium13

Low3

In CISA’s Known Exploited Vulnerabilities catalog

None of gnu tar's CVEs are currently listed in CISA's KEV catalog.

Public exploits

6 of gnu tar's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every gnu tar version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

alpha_1_15_905 CVEs
alpha_1_15_90_incremental_15 CVEs
alpha_1_15_915 CVEs
release_1_145 CVEs
release_1_155 CVEs
release_1_15_15 CVEs
release_1_165 CVEs
release_1_16_15 CVEs
release_1_175 CVEs
release_1_185 CVEs
release_1_195 CVEs
release_1_20

Common weakness types

The CWE weakness categories most often found in gnu tar CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many gnu tar CVEs were published each year.

2005

2006

2007

2010

2016

2018

2019

Other gnu products

Browse vulnerabilities for other products by gnu.

binutils276 CVEs glibc166 CVEs libredwg99 CVEs gnutls75 CVEs grub256 CVEs mailman47 CVEs emacs42 CVEs wget25 CVEs

All gnu vulnerabilities

Frequently asked questions

Common questions about gnu tar vulnerabilities.

How many CVEs does gnu tar have?: gnu tar has 20 published CVE records since 2002.
How many gnu tar CVEs are in CISA KEV?: None of gnu tar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for gnu tar vulnerabilities?: Yes — 6 of gnu tar's CVEs have a known public exploit.
Which versions of gnu tar are affected?: 102 distinct gnu tar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in gnu tar CVEs?: gnu tar's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-24 (Path Traversal: '../filedir'), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition).
How many critical gnu tar vulnerabilities are there?: gnu tar has 1 critical and 3 high-severity CVEs.
What is the average severity of gnu tar CVEs?: The average CVSS base score across gnu tar's scored CVEs is 5.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track gnu tar vulnerabilities

Monitor new gnu tar vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

gnu tar Vulnerabilities