CVE-2013-4397
17.10.2013, 23:55
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | enterprise_linux | 6.0 |
| feep | libtar | 𝑥 ≤ 1.2.19 |
| feep | libtar | 1.2.11 |
| feep | libtar | 1.2.13 |
| feep | libtar | 1.2.14 |
| feep | libtar | 1.2.15 |
| feep | libtar | 1.2.16 |
| feep | libtar | 1.2.17 |
| feep | libtar | 1.2.18 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References