CVE-2013-4397

Synopsis Moderate: libtar security update Type/Severity Security Advisory: Moderate Topic An updated libtar package that fixes one security issue is now availablefor Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vulnerability ...

Debian Bug report logs - #725938 libtar: CVE-2013-4397: Integer overflow Package: libtar; Maintainer for libtar is Magnus Holmgren <holmgren@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 10 Oct 2013 05:54:02 UTC Severity: grave Tags: fixed-upstream, patch, security, upstream Fixed in ...

Timo Warns reported multiple integer overflow vulnerabilities in libtar, a library for manipulating tar archives, which can result in the execution of arbitrary code For the oldstable distribution (squeeze), this problem has been fixed in version 1211-6+deb6u1 For the stable distribution (wheezy), this problem has been fixed in version 1216-1 ...

Multiple integer overflows in the th_read function in lib/blockc in libtar before 1220 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow ...