Fluid Attacks Database

Description

A flaw was found in GNU Tar. An attacker could exploit this vulnerability by providing two specially crafted TAR archives, if those archives were extracted in the same directory. The first archive contains a symbolic link that points to a critical directory. The second archive, when extracted, uses this symbolic link to overwrite sensitive files on the system, bypassing existing directory traversal protections. This could lead to unauthorized file modification or, in some cases, privilege escalation.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9.6	tar	<2:1.34-7.el9_6.2	2:1.34-7.el9_6.2
rpm rhel10	tar	<2:1.35-9.el10_1	2:1.35-9.el10_1
rpm rhel10.0	tar	<2:1.35-7.el10_0.2	2:1.35-7.el10_0.2
rpm rhel6	tar	-	-
rpm rhel7	tar	-	-
rpm rhel8	tar	-	-
rpm rhel9	tar	<2:1.34-9.el9_7	2:1.34-9.el9_7
rpm rhel9.4	tar	<2:1.34-6.el9_4.3	2:1.34-6.el9_4.3

Aliases

1. CVE-2025-455822. NVD-2025-455823. OSV-2025-45582

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.