CVE Database
/

CVE-2010-0624

Back to search

CVE-2010-0624

Published: Mar 12, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2010:0142
vendor-advisory
x_refsource_REDHAT
FEDORA-2010-2895
vendor-advisory
x_refsource_FEDORA
MDVSA-2010:065
vendor-advisory
x_refsource_MANDRIVA
ADV-2010-1107
vdb-entry
x_refsource_VUPEN
RHSA-2010:0144
vendor-advisory
x_refsource_REDHAT
ADV-2010-0629
vdb-entry
x_refsource_VUPEN
SUSE-SR:2010:011
vendor-advisory
x_refsource_SUSE
38988
third-party-advisory
x_refsource_SECUNIA
GLSA-201111-11
vendor-advisory
x_refsource_GENTOO
FEDORA-2010-4309
vendor-advisory
x_refsource_FEDORA
ADV-2010-0687
vdb-entry
x_refsource_VUPEN
ADV-2010-0639
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:6907
vdb-entry
signature
x_refsource_OVAL
ADV-2010-0628
vdb-entry
x_refsource_VUPEN
RHSA-2010:0141
vendor-advisory
x_refsource_REDHAT
FEDORA-2010-4321
vendor-advisory
x_refsource_FEDORA
USN-2456-1
vendor-advisory
x_refsource_UBUNTU
39008
third-party-advisory
x_refsource_SECUNIA
FEDORA-2010-4302
vendor-advisory
x_refsource_FEDORA
20101027 rPSA-2010-0070-1 cpio tar
mailing-list
x_refsource_BUGTRAQ
oval:org.mitre.oval:def:10277
vdb-entry
signature
x_refsource_OVAL
RHSA-2010:0145
vendor-advisory
x_refsource_REDHAT
38869
third-party-advisory
x_refsource_SECUNIA
ADV-2010-0729
vdb-entry
x_refsource_VUPEN
FEDORA-2010-4306
vendor-advisory
x_refsource_FEDORA
ADV-2010-0728
vdb-entry
x_refsource_VUPEN
62950
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now