| Package | Affected versions | Patched versions |
|---|---|---|
| cpio | = 1.0= 1.1= 1.2= 1.3= 2.4-2= 2.5= 2.5.90= 2.6= 2.7= 2.8= 2.9≤ 2.10 | |
| tar | = 1.13= 1.13.11= 1.13.14= 1.13.16= 1.13.17= 1.13.18= 1.13.19= 1.13.25= 1.13.5= 1.14= 1.14.1= 1.14.90= 1.15= 1.15.1= 1.15.90= 1.15.91= 1.16= 1.16.1= 1.17= 1.18= 1.19= 1.20= 1.21≤ 1.22 |
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free