CVE-2013-4397

概要

参考情報

• repo.or.cz/w/libtar.git/commitdiff/45448e8bae671c2f7e80b860ae0fc0cedf2bdc04 · Exploit
• rhn.redhat.com/errata/RHSA-2013-1418.html · Vendor Advisory
• secunia.com/advisories/55188 · Vendor Advisory
• secunia.com/advisories/55253 · Vendor Advisory
• debian.org/security/2013/dsa-2817
• openwall.com/lists/oss-security/2013/10/10/4
• openwall.com/lists/oss-security/2013/10/10/6
• securityfocus.com/bid/62922
• securitytracker.com/id/1029166
• securitytracker.com/id/1040106
• lists.feep.net/pipermail/libtar/2013-October/000361.html
• source.android.com/security/bulletin/2018-01-01

libtar のその他の脆弱性

• CVE-2021-33646高 7.5The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
• CVE-2021-33645高 7.5The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.
• CVE-2021-33644高 8.1An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable …
• CVE-2021-33643緊急 9.1An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable …
• CVE-2013-4420中 5.8Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allo…