CVE-2007-4476 Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
HighCVSS 7.5
EPSS 14.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU tar | < 1.19 | 1.19 |
| debian linux | = 3.1 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| debian/cpio(Debian:12) | < 2.9-5 | 2.9-5 |
| debian/cpio(Debian:13) | < 2.9-5 | 2.9-5 |
| debian/cpio(Debian:14) | < 2.9-5 | 2.9-5 |
| debian/tar(Debian:12) | < 1.18-1 | 1.18-1 |
| debian/tar(Debian:13) | < 1.18-1 | 1.18-1 |
| debian/tar(Debian:14) | < 1.18-1 | 1.18-1 |
References
- Debian Security Tracker CVE-2007-4476 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.gentoo.org third-party-advisory
- kb.juniper.net third-party-advisory
- kb.juniper.net third-party-advisory
- 26674 patch third-party-advisory
- 26987 third-party-advisory
- 27331 third-party-advisory
- 27453 third-party-advisory
- 27514 third-party-advisory
- 27681 third-party-advisory
- 27857 third-party-advisory
- 28255 third-party-advisory
- 29968 third-party-advisory
- 32051 third-party-advisory
- 33567 third-party-advisory
- 39008 third-party-advisory
- GLSA-200711-18 third-party-advisory vendor-advisory
- 1021680 broken-link vendor-advisory
- DSA-1438 third-party-advisory vendor-advisory
- DSA-1566 third-party-advisory vendor-advisory
- MDKSA-2007:197 broken-link vendor-advisory
- MDKSA-2007:233 broken-link vendor-advisory
- SUSE-SR:2007:018 broken-link vendor-advisory
- SUSE-SR:2007:019 broken-link vendor-advisory
- RHSA-2010:0141 third-party-advisory vendor-advisory
- RHSA-2010:0144 third-party-advisory vendor-advisory
- 26445 third-party-advisory vdb-entry
- USN-650-1 third-party-advisory vendor-advisory
- USN-709-1 third-party-advisory vendor-advisory
- ADV-2010-0628 permissions-required vdb-entry
- ADV-2010-0629 permissions-required vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:7114 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:8599 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:9336 signature third-party-advisory vdb-entry
- FEDORA-2007-735 third-party-advisory vendor-advisory
- FEDORA-2007-2673 third-party-advisory vendor-advisory