CVEvulnerability

CVE-2010-0624

6.8 MEDIUM Published 2010-03-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-03-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.

Affected configurations

• gnu cpio (<= 2.10) • gnu cpio 1.0 • gnu cpio 1.1 • gnu cpio 1.2 • gnu cpio 1.3 • gnu cpio 2.4-2 • gnu cpio 2.5 • gnu cpio 2.5.90 • gnu cpio 2.6 • gnu cpio 2.7 • gnu cpio 2.8 • gnu cpio 2.9 • gnu tar (<= 1.22) • gnu tar 1.13 • gnu tar 1.13.5 • gnu tar 1.13.11 • gnu tar 1.13.14 • gnu tar 1.13.16 • gnu tar 1.13.17 • gnu tar 1.13.18 • gnu tar 1.13.19 • gnu tar 1.13.25 • gnu tar 1.14 • gnu tar 1.14.1 • gnu tar 1.14.90 • gnu tar 1.15 • gnu tar 1.15.1 • gnu tar 1.15.90 • gnu tar 1.15.91 • gnu tar 1.16 • gnu tar 1.16.1 • gnu tar 1.17 • gnu tar 1.18 • gnu tar 1.19 • gnu tar 1.20 • gnu tar 1.21

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References