GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that…

Description

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.

Scores

EPSS (exploitation in 30 days)

11.7% · top 3.9% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.0.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (42)

• 23117 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:10963 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• https://issues.rpath.com/browse/RPL-821 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 1918 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
• TA07-072A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
• 21235 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 23146 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20061121 GNU tar directory traversal (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• APPLE-SA-2007-03-13 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• 23209 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://docs.info.apple.com/article.html?artnum=305214 (opens in a new tab)x_refsource_CONFIRMx_transferred
• ADV-2006-5102 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 2006-0068 (opens in a new tab)vendor-advisoryx_refsource_TRUSTIXx_transferred
• 23142 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 23314 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2007-1171 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• GLSA-200612-10 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 23198 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 23115 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 20061201 rPSA-2006-0222-1 tar (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 23911 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• USN-385-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 20070330 VMSA-2007-0002 VMware ESX security updates (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 23173 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• RHSA-2006:0749 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• FreeBSD-SA-06:26 (opens in a new tab)vendor-advisoryx_refsource_FREEBSDx_transferred
• 1017423 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• 24636 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-1223 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• ADV-2007-0930 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 23443 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937 (opens in a new tab)x_refsource_MISCx_transferred
• MDKSA-2006:219 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• OpenPKG-SA-2006.038 (opens in a new tab)vendor-advisoryx_refsource_OPENPKGx_transferred
• ADV-2006-4717 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 23514 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SSA:2006-335-01 (opens in a new tab)vendor-advisoryx_refsource_SLACKWAREx_transferred
• 24479 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 23163 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-6097](https://trackcve.app/badge/CVE-2006-6097.svg)](https://trackcve.app/cve/CVE-2006-6097)

Record last updated 7 Aug 2024, 20:12 UTC.