NVD

Id
40009  
Name
CVE-2013-4397  
Description
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-17  
Modified Date
2013-12-19  
Seq
2013-4397  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203566 40009 CVE-2013-4397 http://repo.or.cz/w/libtar.git/commitdiff/45448e8bae671c2f7e80b860ae0fc0cedf2bdc04  View
203567 40009 CVE-2013-4397 RHSA-2013:1418  View
203568 40009 CVE-2013-4397 DSA-2817  View
203569 40009 CVE-2013-4397 [oss-security] 20131010 Integer overflow in libtar (<= 1.2.19)  View
203570 40009 CVE-2013-4397 [oss-security] 20131010 Re: Integer overflow in libtar (<= 1.2.19)  View
203571 40009 CVE-2013-4397 62922  View
203572 40009 CVE-2013-4397 1029166  View
203573 40009 CVE-2013-4397 [libtar] 20131009 ANNOUNCE: libtar version 1.2.20  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23228 JVNDB-2013-004803 libtar の lib/block.c の th_read 関数における整数オーバーフローの脆弱性 libtar の lib/block.c の th_read 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2013-4397 64339 CVE-2013-4397 40009 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004803.html 2013-10-01 2014-01-09 View