CVE-2013-4397 — Heap-based Buffer Overflow in Libtar
Severity
6.8MEDIUMNVD
EPSS
4.3%
top 11.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 17
Latest updateMay 14
Description
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages4 packages
Also affects: Enterprise Linux 6.0
Patches
🔴Vulnerability Details
2📋Vendor Advisories
9Debian▶
CVE-2013-4397: libtar - Multiple integer overflows in the th_read function in lib/block.c in libtar befo...↗2013
💬Community
4Bugzilla▶
CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive [epel-5]↗2013-10-10
Bugzilla▶
CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive [fedora-all]↗2013-10-10
Bugzilla▶
CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive↗2013-10-02