Lucene search
Redhat.comRH:CVE-2016-6321HistoryOct 27, 2016 - 7:47 a.m.
CVE-2016-6321
2016-10-2707:47:17
redhat.com
access.redhat.com
18
EPSS
0.005
Percentile
76.1%
Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.
Mitigation
Use the "star" utility provided by the "star" package to process archives from untrusted sources.
Related
debian
debian
[SECURITY] [DSA 3702-1] tar security update
2016-11-01 19:15:47
[SECURITY] [DSA 3702-1] tar security update
2016-11-01 19:15:47
[SECURITY] [DLA 690-1] tar security update
2016-10-31 16:01:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0386)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for tar (EulerOS-SA-2020-2091)
2020-09-29 00:00:00
Ubuntu: Security Advisory (USN-3132-1)
2016-11-22 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : tar vulnerability (USN-3132-1)
2016-11-22 00:00:00
EulerOS 2.0 SP3 : tar (EulerOS-SA-2020-2091)
2020-09-28 00:00:00
Photon OS 1.0: Tar PHSA-2017-0015
2019-02-07 00:00:00
seebug
seebug
GNU tarοΌPOINTYFEATHERοΌ decompression path bypass vulnerability
2016-11-07 00:00:00
osv
osv
CVE-2016-6321
2016-12-09 22:59:00
tar - security update
2016-10-31 00:00:00
tar - security update
2016-11-01 00:00:00
nvd
nvd
CVE-2016-6321
2016-12-09 22:59:00
alpinelinux
alpinelinux
CVE-2016-6321
2016-12-09 22:59:00
cvelist
cvelist
CVE-2016-6321
2016-12-09 22:00:00
cve
cve
CVE-2016-6321
2016-12-09 22:59:00
gentoo
gentoo
Tar: Extract pathname bypass
2016-11-22 00:00:00
ubuntu
ubuntu
tar vulnerability
2016-11-21 00:00:00
cloudfoundry
cloudfoundry
USN-3132-1: tar vulnerability | Cloud Foundry
2016-12-14 00:00:00
ubuntucve
ubuntucve
CVE-2016-6321
2016-10-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package tar version 1.29.0.19.d061-alt1
2017-03-28 00:00:00
mageia
mageia
Updated tar packages fix security vulnerability
2016-11-18 02:40:52
prion
prion
Directory traversal
2016-12-09 22:59:00
archlinux
archlinux
[ASA-201611-11] tar: arbitrary file overwrite
2016-11-03 00:00:00
packetstorm
packetstorm
GNU tar 1.29 Extract Pathname Bypass
2016-10-27 00:00:00
debiancve
debiancve
CVE-2016-6321
2016-12-09 22:59:00
veracode
veracode
Directory Traversal
2021-10-01 05:13:26
ibm
ibm
