CVE-2025-45582

mediumPriorität · verfolgen · 0EPSS 0.005 · 42. PerzentilDEEUFRRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.49% (42nd) EPSS

CVSS 4.1 · medium

Is it mine?

23 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in which "tar xf" is run more than once (e.g., when installing a package can automatically install two dependencies that are set up as untrusted tarballs instead of official packages). NOTE: the official GNU Tar manual has an otherwise-empty directory for each "tar xf" in its Security Rules of Thumb; however, third-party advice leads users to run "tar xf" more than once into the same directory.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobentar-2:1.35-9.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-2:1.34-9.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-2:1.34-7.el9_6.2.x86_64 as component of SUSE Liberty Linux 9.6 EMSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.34-150000.3.37.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-backup-scripts-0:1.34-150000.3.37.1.noarch as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-doc-0:1.34-150000.3.37.1.noarch as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.34-150000.3.37.1.noarch as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.34-150000.3.37.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.34-150000.3.37.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.34-150000.3.37.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.34-150000.3.37.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.34-150000.3.37.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-slfo.1.1_3.1.aarch64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-slfo.1.1_3.1.ppc64le as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-slfo.1.1_3.1.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-slfo.1.1_3.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-3.1.aarch64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-3.1.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-3.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.s390x as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-backup-scripts-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-backup-scripts-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-doc-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-doc-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.aarch64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.ppc64le as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.s390x as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-0:1.35-160000.3.1.x86_64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-backup-scripts-0:1.35-160000.3.1.noarch as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-doc-0:1.35-160000.3.1.noarch as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-lang-0:1.35-160000.3.1.noarch as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.aarch64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.ppc64le as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.s390x as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-rmt-0:1.35-160000.3.1.x86_64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.35-160000.3.1.aarch64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.35-160000.3.1.ppc64le as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.35-160000.3.1.s390x as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobentar-tests-0:1.35-160000.3.1.x86_64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 3.8–7.8

v3.14.1mediumAV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:Lsecondary · FSTEC (BDU) RU

v3.14.1mediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:Lsecondary · ENISA EU

v3.14.1mediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:Lsecondary · cve@mitre.org USAusnutzbarkeit 1 · Auswirkung 2.7

v3.13.8lowCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · SUSE Product Security

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: poc · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-24USCWE-24US

betroffene Produkte (23)

Betroffene Produkte und Versionsbereiche.

Dell Secure Connect Gateway <5.36.00.16alle Versionencert_bundDE
IBM App Connect Enterprisealle Versionencert_bundDEcpe:/a:ibm:app_connect_enterprise:-
IBM MQ Operatoralle Versionencert_bundDEcpe:/a:ibm:mq:operator
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxalle Versionencert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux <10alle Versionencert_bundDE
Red Hat OpenShift Container Platform <4.14.62alle Versionencert_bundDE
Red Hat OpenShift Container Platform <4.15.62alle Versionencert_bundDE
Red Hat OpenShift Container Platform <4.16.58alle Versionencert_bundDE
Red Hat OpenShift Container Platform <4.18.34alle Versionencert_bundDE
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEalle Versionencert_bundDEcpe:/o:suse:opensuse:-
Dell Secure Connect Gateway< 5.36.00.16cert_bundDE
Red Hat Enterprise Linux< 10cert_bundDE
Red Hat OpenShift≤ Container Platform <4.14.62cert_bundDE
Red Hat OpenShift≤ Container Platform <4.15.62cert_bundDE
Red Hat OpenShift≤ Container Platform <4.16.58cert_bundDE
Red Hat OpenShift≤ Container Platform <4.18.34cert_bundDE
GNU Tar≤ 0 ≤1.35enisa_euvdEU

20 von 23 angezeigt

Advisories (13)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2026:0002security update for tar2026-01-05csaf · suse_csafDE
security update for tar
RHSA-2026:0067security update for tar2026-01-05csaf · suse_csafDE
security update for tar
RHSA-2026:0435security update for tar2026-01-12csaf · suse_csafDE
security update for tar
SUSE-SU-2026:1177-1Security update for tar2026-04-02csaf · suse_csafDE
Security update for tar
SUSE-SU-2026:20955-1Security update for tar2026-04-01csaf · suse_csafDE
Security update for tar
SUSE-SU-2026:20959-1Security update for tar2026-04-01csaf · suse_csafDE
Security update for tar
SUSE-SU-2026:21002-1Security update for tar2026-04-07csaf · suse_csafDE
Security update for tar
SUSE-SU-2026:21143-1Security update for tar2026-04-07csaf · suse_csafDE
Security update for tar
WID-SEC-W-2026-0008Red Hat Enterprise Linux: Mehrere SchwachstellenDeutsch2026-01-04csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux bezüglich der Komponenten "tar" und "Scrapy" ausnutzen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2026-1730Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffDeutsch2026-05-28csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
WID-SEC-W-2026-2253IBM Security Verify Access: Mehrere SchwachstellenDeutsch2026-07-08csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen und andere, nicht näher bezeichnete Angriffe durchzuführen.
openSUSE-SU-2026:20472-1Security update for tar2026-04-07csaf · suse_csafDE
Security update for tar
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund suse_csaf certfr NVD CVE.org MITRE

veröffentlicht 2025-07-11geändert 2026-06-17

Referenzen (18)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan