PT-2010-1074 · Gnu+2 · Tar+3

Jakob Lell

·

Published

2010-03-12

·

Updated

2024-06-15

·

CVE-2010-0624

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions tar versions prior to 1.23 GNU cpio versions prior to 2.11
Description The issue is related to a heap-based buffer overflow in the rmt read function in lib/rtapelib.c in the rmt client functionality. This can be exploited by remote rmt servers, allowing them to cause a denial of service or possibly execute arbitrary code by sending more data than was requested, particularly with archive filenames containing a colon character. The vulnerability can lead to a disruption of confidentiality, integrity, and availability of protected information and can be exploited remotely.
Recommendations For tar versions prior to 1.23, update to version 1.23 or later to resolve the issue. For GNU cpio versions prior to 2.11, update to version 2.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the rmt client functionality until a patch is available. Avoid using archive filenames that contain a colon character in the affected API endpoint until the issue is resolved.

Exploit

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2015-06547
BDU:2015-06548
BDU:2015-07617
BDU:2015-08363
BDU:2015-08364
BDU:2015-08599
CVE-2010-0624
OPENSUSE-SU-2024:10143-1
OPENSUSE-SU-2024:10382-1
RHSA-2010:0141
RHSA-2010:0142
RHSA-2010:0143
RHSA-2010:0144
RHSA-2010:0145
RHSA-2010_0141
RHSA-2010_0143
RHSA-2010_0144
USN-2456-1

Affected Products

Gnu Cpio
Red Hat
Ubuntu
Tar