PT-2025-29264 · Gnu+4 · Gnu Tar+4
I900008
·
Published
2025-07-11
·
Updated
2026-05-10
·
CVE-2025-45582
CVSS v3.1
4.1
Medium
| Vector | AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions:
GNU Tar versions through 1.35
Description:
GNU Tar through version 1.35 is susceptible to a directory traversal vulnerability that allows for file overwrites within crafted TAR archives. The vulnerability requires a two-step process: first, extracting an archive containing a
../ symlink to a critical directory, and second, extracting an archive containing a critical file specified via a relative pathname beginning with the symlink name. This process bypasses the standard protection mechanism that prevents file access through paths containing ... An example of this attack involves an archive containing "x -> ../../../../../home/victim/.ssh" followed by an archive containing "x/authorized keys", potentially overwriting the authorized keys file. This issue can impact server applications that automatically extract user-supplied TAR archives and software installation processes involving multiple tar xf commands.Recommendations:
Versions prior to 1.36 are affected.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Gnu Tar
Red Hat
Red Os
Rocky Linux