CVE-2025-45582 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-45582 Interim 1 4 2026-03-05T00:34:05Z current 2025-07-12T06:36:02Z 2026-03-05T00:34:05Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-45582 GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in which "tar xf" is run more than once (e.g., when installing a package can automatically install two dependencies that are set up as untrusted tarballs instead of official packages). NOTE: the official GNU Tar manual has an otherwise-empty directory for each "tar xf" in its Security Rules of Thumb; however, third-party advice leads users to run "tar xf" more than once into the same directory. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Micro 6.2 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 tar tar-1.34-7.el9_6.2 tar-backup-scripts tar-doc tar-lang tar-rmt tar-tests tar-1.34-7.el9_6.2 as a component of SUSE Liberty Linux 9 tar as a component of SLES-LTSS-TERADATA 15 SP2 tar as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS tar-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS tar-rmt as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS tar as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tar-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tar-rmt as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tar as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS tar-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS tar-rmt as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS tar as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tar-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tar-rmt as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tar as a component of SUSE Linux Enterprise Micro 5.1 tar as a component of SUSE Linux Enterprise Micro 5.2 tar as a component of SUSE Linux Enterprise Micro 5.3 tar as a component of SUSE Linux Enterprise Micro 5.4 tar as a component of SUSE Linux Enterprise Micro 5.5 tar as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 tar-lang as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 tar-rmt as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 tar as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 tar-lang as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 tar-rmt as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 tar as a component of SUSE Linux Enterprise Server 11 SP4 LTSS tar as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tar-lang as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tar as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tar-lang as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tar as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tar-lang as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tar as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security tar as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tar-lang as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tar-rmt as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tar as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tar-lang as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tar-rmt as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tar as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tar-lang as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tar-rmt as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tar as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tar-lang as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tar-rmt as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tar as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tar-lang as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tar-rmt as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tar as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tar-lang as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tar-rmt as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tar as a component of SUSE Linux Enterprise Server 15-LTSS tar-lang as a component of SUSE Linux Enterprise Server 15-LTSS tar-rmt as a component of SUSE Linux Enterprise Server 15-LTSS tar as a component of SUSE Linux Enterprise Server 16.0 tar-backup-scripts as a component of SUSE Linux Enterprise Server 16.0 tar-doc as a component of SUSE Linux Enterprise Server 16.0 tar-lang as a component of SUSE Linux Enterprise Server 16.0 tar-rmt as a component of SUSE Linux Enterprise Server 16.0 tar as a component of SUSE Linux Enterprise Server Teradata 12 SP3 tar as a component of SUSE Linux Enterprise Server Teradata 15 SP4 tar as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 tar-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 tar-rmt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 tar as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tar-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tar-rmt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tar as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tar-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tar-rmt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tar as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tar-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tar-rmt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tar as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tar-backup-scripts as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tar-doc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tar-lang as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tar-rmt as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tar as a component of SUSE Linux Micro 6.0 tar as a component of SUSE Linux Micro 6.1 tar as a component of SUSE Linux Micro 6.2 tar as a component of SUSE Manager Proxy 4.3 tar-lang as a component of SUSE Manager Proxy 4.3 tar-rmt as a component of SUSE Manager Proxy 4.3 tar as a component of SUSE Manager Proxy LTS 4.3 tar-lang as a component of SUSE Manager Proxy LTS 4.3 tar-rmt as a component of SUSE Manager Proxy LTS 4.3 tar as a component of SUSE Manager Retail Branch Server 4.3 tar-lang as a component of SUSE Manager Retail Branch Server 4.3 tar-rmt as a component of SUSE Manager Retail Branch Server 4.3 tar as a component of SUSE Manager Retail Branch Server LTS 4.3 tar-lang as a component of SUSE Manager Retail Branch Server LTS 4.3 tar-rmt as a component of SUSE Manager Retail Branch Server LTS 4.3 tar as a component of SUSE Manager Server 4.3 tar-lang as a component of SUSE Manager Server 4.3 tar-rmt as a component of SUSE Manager Server 4.3 tar as a component of SUSE Manager Server LTS 4.3 tar-lang as a component of SUSE Manager Server LTS 4.3 tar-rmt as a component of SUSE Manager Server LTS 4.3 tar as a component of openSUSE Leap 15.6 tar-backup-scripts as a component of openSUSE Leap 15.6 tar-doc as a component of openSUSE Leap 15.6 tar-lang as a component of openSUSE Leap 15.6 tar-rmt as a component of openSUSE Leap 15.6 tar-tests as a component of openSUSE Leap 15.6 GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in which "tar xf" is run more than once (e.g., when installing a package can automatically install two dependencies that are set up as untrusted tarballs instead of official packages). NOTE: the official GNU Tar manual has an otherwise-empty directory for each "tar xf" in its Security Rules of Thumb; however, third-party advice leads users to run "tar xf" more than once into the same directory. CVE-2025-45582 SUSE Liberty Linux 9:tar-1.34-7.el9_6.2 important 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H