CVE-2013-4397

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-4397
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://repo.or.cz/w/libtar.git/commitdiff/45448e8bae671c2f7e80b860ae0fc0cedf2bdc04 Exploit Patch
http://rhn.redhat.com/errata/RHSA-2013-1418.html Vendor Advisory
http://secunia.com/advisories/55188 Vendor Advisory
http://secunia.com/advisories/55253 Vendor Advisory
http://www.debian.org/security/2013/dsa-2817
http://www.openwall.com/lists/oss-security/2013/10/10/4
http://www.openwall.com/lists/oss-security/2013/10/10/6
http://www.securityfocus.com/bid/62922
http://www.securitytracker.com/id/1029166
http://www.securitytracker.com/id/1040106
https://lists.feep.net:8080/pipermail/libtar/2013-October/000361.html
https://source.android.com/security/bulletin/2018-01-01
Configurations

Configuration 1 (hide)

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:feep:libtar:*:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.16:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.17:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.18:*:*:*:*:*:*:*
History

13 Feb 2023, 04:46

Type Values Removed Values Added
Summary CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.
References
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1014492', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1014492', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2013:1418', 'name': 'https://access.redhat.com/errata/RHSA-2013:1418', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2013-4397', 'name': 'https://access.redhat.com/security/cve/CVE-2013-4397', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 20:15

Type Values Removed Values Added
References
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1014492 -
  • (MISC) https://access.redhat.com/errata/RHSA-2013:1418 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2013-4397 -
Summary Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow. CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive
Information

Published : 2013-10-17 23:55

Updated : 2023-12-10 11:16

NVD link : CVE-2013-4397

Mitre link : CVE-2013-4397

CVE.ORG link : CVE-2013-4397

JSON object : View

Products Affected

feep

  • libtar

redhat

  • enterprise_linux
CWE
CWE-189

Numeric Errors