CVE-2013-4397: Undefined Security Weakness

🗓️ 17 Oct 2013 00:00:00Reported by Rapid7Type

rapid7🔗 www.rapid7.com👁 2 Views

Remote integer overflows in libtar before 1.2.20 allow DoS or RCE via archive names.

Reporter	Title	Published	Views	Family All 63
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 6 : libtar (CESA-2013:1418)	13 Oct 201300:00	–	nessus
Tenable Nessus	Debian DSA-2817-1 : libtar - Integer overflow	16 Dec 201300:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-4397
cwe	www.cwe.mitre.org/data/definitions/189.html

06 Aug 2024 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.8

EPSS0.05485

libtar th_thread integer overflow heap-based buffer overflow denial of service remote code execution