Поиск уязвимостей
Количество 51
Количество 51
CVE-2026-5704
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
CVE-2026-5704
Tar: tar: hidden file injection via crafted archives
CVE-2026-5704
A flaw was found in tar. A remote attacker could exploit this vulnerab ...
ROS-20261021-80-0008
Уязвимость tar
ROS-20261021-73-0009
Уязвимость tar
GHSA-4f5j-wqjr-hx49
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction.
SUSE-SU-2026:2714-1
Security update for tar
ROS-20261021-80-0016
Уязвимость tar
ROS-20261021-73-0017
Уязвимость tar
GHSA-jqqw-37x4-9rwj
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.
BDU:2026-18173
Уязвимость архиватора GNU Tar, связанная с отсутствием ограничений на загрузку файлов, позволяющая нарушителю оказать воздействие на целостность данных
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-5704 A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-5704 Tar: tar: hidden file injection via crafted archives | 0% Низкий | 2 месяца назад | |
| CVE-2026-5704 A flaw was found in tar. A remote attacker could exploit this vulnerab ... | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад |
 | ROS-20261021-80-0008 Уязвимость tar | CVSS3: 4.4 | 0% Низкий | 22 дня назад |
| ROS-20261021-73-0009 Уязвимость tar | CVSS3: 4.4 | 0% Низкий | 22 дня назад |
| GHSA-4f5j-wqjr-hx49 A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction. | CVSS3: 4.4 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:2714-1 Security update for tar | 0% Низкий | 4 месяца назад | |
| ROS-20261021-80-0016 Уязвимость tar | CVSS3: 5.5 | 0% Низкий | 22 дня назад |
| ROS-20261021-73-0017 Уязвимость tar | CVSS3: 5.5 | 0% Низкий | 22 дня назад |
| GHSA-jqqw-37x4-9rwj A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. | CVSS3: 5 | 0% Низкий | 7 месяцев назад |
 | BDU:2026-18173 Уязвимость архиватора GNU Tar, связанная с отсутствием ограничений на загрузку файлов, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 5 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу