CVE-2006-0300: GNU Tar

Medium severity, CVSS 5.1. EPSS: 5.2% chance of exploitation in the next 30 days.

Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.

Affected products

• GNU Tar: version 1.14 only; version 1.14.1 only; version 1.15 only; version 1.15.1 only; version 1.15.90 only

Published 2006-02-24. Last modified 2026-06-16.