Skip to content

Product

archive/tar vulnerabilities

3 published CVES affecting archive/tar, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest archive/tar CVEs

Newest publication first

  2. CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar

    Published
    MediumCVSS 4.3 EPSS 0.44%

    tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When r...

  3. CVE-2022-2879 Unbounded memory consumption when reading headers in archive/tar

    Published
    HighCVSS 7.5 EPSS 2.0%

    Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 Mi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.