{"schemaVersion":3,"id":"CVE-2016-6321","aliases":["ALPINE-CVE-2016-6321","MGASA-2016-0386","SUSE-SU-2016:2895-1","SUSE-SU-2016:2896-1","UBUNTU-CVE-2016-6321","USN-3132-1","DEBIAN-CVE-2016-6321","DLA-690-1","DSA-3702-1"],"status":"published","duplicateOf":null,"title":null,"description":"Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.","dates":{"published":"2016-12-09T22:00:00.000Z","modified":"2025-08-06T21:12:29.246Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Alpine","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.15745,"percentile":0.9684,"severity":"medium","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.15745},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.14141,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.15745,"percentile":0.9684}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.14141,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15745,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.15745,"percentile":0.9684}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_547AA3401435A5BD","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"alpine","product":"tar","name":"tar","label":"tar","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/tar","purlType":"apk","versions":[{"text":"< 1.29-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.29-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"tar","name":"tar","label":"tar","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/tar","purlType":"deb","versions":[{"text":"< 1.29b-1.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.27.1-2+deb8u1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.26+dfsg-0.1+deb7u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.29b-1.1 | < 1.27.1-2+deb8u1 | < 1.26+dfsg-0.1+deb7u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"tar","name":"tar","label":"tar","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/tar","purlType":"deb","versions":[{"text":"< 1.27.1-1ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.28-2.1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-1ubuntu0.1 | < 1.28-2.1ubuntu0.1","eol":null,"hubHref":null},{"vendor":"gnu","product":"tar","name":"tar","label":"tar","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.14","noFixRecorded":false,"fixedIn":null},{"text":"1.15","noFixRecorded":false,"fixedIn":null},{"text":"1.15.1","noFixRecorded":false,"fixedIn":null},{"text":"1.15.90","noFixRecorded":false,"fixedIn":null},{"text":"1.15.91","noFixRecorded":false,"fixedIn":null},{"text":"1.16","noFixRecorded":false,"fixedIn":null},{"text":"1.16.1","noFixRecorded":false,"fixedIn":null},{"text":"1.17","noFixRecorded":false,"fixedIn":null},{"text":"1.18","noFixRecorded":false,"fixedIn":null},{"text":"1.19","noFixRecorded":false,"fixedIn":null},{"text":"1.20","noFixRecorded":false,"fixedIn":null},{"text":"1.21","noFixRecorded":false,"fixedIn":null},{"text":"1.22","noFixRecorded":false,"fixedIn":null},{"text":"1.23","noFixRecorded":false,"fixedIn":null},{"text":"1.24","noFixRecorded":false,"fixedIn":null},{"text":"1.25","noFixRecorded":false,"fixedIn":null},{"text":"1.26","noFixRecorded":false,"fixedIn":null},{"text":"1.27","noFixRecorded":false,"fixedIn":null},{"text":"1.27.1","noFixRecorded":false,"fixedIn":null},{"text":"1.28","noFixRecorded":false,"fixedIn":null},{"text":"1.29","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.14 | 1.15 | 1.15.1 | 1.15.90 | 1.15.91 | 1.16 | 1.16.1 | 1.17 | 1.18 | 1.19 | 1.20 | 1.21 | 1.22 | 1.23 | 1.24 | 1.25 | 1.26 | 1.27 | 1.27.1 | 1.28 | 1.29","eol":null,"hubHref":"/vendor/gnu/tar"},{"vendor":"mageia","product":"tar","name":"tar","label":"tar","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/tar","purlType":"rpm","versions":[{"text":"< 1.28-3.1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28-3.1.mga5","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"tar","label":"tar&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 1.27.1-11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"tar","label":"tar&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 1.27.1-11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Server 11 SP4","name":"tar","label":"tar&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 1.26-1.2.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26-1.2.10.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Server 12 SP1","name":"tar","label":"tar&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 1.27.1-11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Server 12 SP2","name":"tar","label":"tar&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 1.27.1-11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"tar","label":"tar&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 1.27.1-11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"tar","label":"tar&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 1.26-1.2.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26-1.2.10.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"tar","label":"tar&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 1.27.1-11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tar&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"tar","label":"tar&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tar&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 1.27.1-11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.1-11.1","eol":null,"hubHref":null}],"affectedCount":14,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://seclists.org/fulldisclosure/2016/Oct/102","label":"seclists.org/fulldisclosure/2016/Oct/102","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93937","label":"www.securityfocus.com/bid/93937","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-19","label":"security.gentoo.org/glsa/201611-19","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://seclists.org/fulldisclosure/2016/Oct/96","label":"seclists.org/fulldisclosure/2016/Oct/96","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d","label":"git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d","hostname":"git.savannah.gnu.org","tags":["X Refsource CONFIRM","Issue Tracking","Patch"]},{"url":"http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html","label":"lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html","hostname":"lists.gnu.org","tags":["Mailing List","X Refsource MLIST","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3702","label":"www.debian.org/security/2016/dsa-3702","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt","label":"sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt","hostname":"sintonen.fi","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html","label":"packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3132-1","label":"www.ubuntu.com/usn/USN-3132-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-6321","label":"security.alpinelinux.org/vuln/CVE-2016-6321","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0386.html","label":"advisories.mageia.org/MGASA-2016-0386.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19696","label":"bugs.mageia.org/show_bug.cgi?id=19696","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.debian.org/security/2016/dsa-3702","label":"www.debian.org/security/2016/dsa-3702","hostname":"www.debian.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162895-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20162895-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1007188","label":"bugzilla.suse.com/1007188","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6321","label":"www.suse.com/security/cve/CVE-2016-6321","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162896-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20162896-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/913058","label":"bugzilla.suse.com/913058","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2016-6321","label":"ubuntu.com/security/CVE-2016-6321","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://sintonen.fi/advisories/tar-extract-pathname-bypass.txt","label":"sintonen.fi/advisories/tar-extract-pathname-bypass.txt","hostname":"sintonen.fi","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3132-1","label":"ubuntu.com/security/notices/USN-3132-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6321","label":"www.cve.org/CVERecord?id=CVE-2016-6321","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-6321","label":"security-tracker.debian.org/tracker/CVE-2016-6321","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10382-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10382-1"]},"timeline":[{"kind":"published","date":"2016-12-09T22:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-08-06T21:12:29.246Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":43,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T20:46:01.615Z","stale":false,"partial":false}}