CVE-2013-4397 Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1)...
MediumCVSS 6.8
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libtar(Debian:12) | < 1.2.20-1 | 1.2.20-1 |
| redhat enterprise linux | = 6.0 | No fix listed |
| feep libtar | <= 1.2.19 | No fix listed |
| feep libtar | = 1.2.11 | No fix listed |
| feep libtar | = 1.2.13 | No fix listed |
| feep libtar | = 1.2.14 | No fix listed |
| feep libtar | = 1.2.15 | No fix listed |
| feep libtar | = 1.2.16 | No fix listed |
| feep libtar | = 1.2.17 | No fix listed |
| feep libtar | = 1.2.18 | No fix listed |
References
- Debian Security Tracker CVE-2013-4397 vendor-advisory
- repo.or.cz exploit patch
- RHSA-2013:1418 vendor-advisory
- 55188 third-party-advisory vendor-advisory
- 55253 third-party-advisory vendor-advisory
- DSA-2817 vendor-advisory
- [oss-security] 20131010 Integer overflow in libtar (<= 1.2.19) mailing-list
- [oss-security] 20131010 Re: Integer overflow in libtar (<= 1.2.19) mailing-list
- 62922 vdb-entry
- 1029166 vdb-entry
- 1040106 vdb-entry
- [libtar] 20131009 ANNOUNCE: libtar version 1.2.20 mailing-list
- source.android.com
- bugs.debian.org issue-tracking