GNU tar - Bugs: bug #62387, [SECURITY] Heap Buffer Overflow
bug #62387: [SECURITY] Heap Buffer Overflow
Submitter: | Carlos Andres Ramirez <carlos_ramirez> | ||
Submitted: | Sat 30 Apr 2022 08:58:25 AM UTC | ||
Category: | None | Severity: | 3 - Normal |
Item Group: | None | Status: | Fixed |
Privacy: | Public | Assigned to: | gray |
Open/Closed: | Closed |
Discussion locked!
Spam posted by _341921 | |
Sat 11 Feb 2023 10:07:43 AM UTC, comment #2: |
Sergey Poznyakoff <gray>![]() ![]() |
Wed 11 Jan 2023 09:01:16 AM UTC, comment #1: I created a patch #10307 fixing this issue. |
Matej Mužila <mmuzila> |
Sat 30 Apr 2022 08:58:25 AM UTC, original submission:
A Heap Buffer Overflow exists in GNU Tar 1.34. The issue takes place at from_header() in list.c in the tar application. The issue occurs when attempting to read files with old V7 tar format with an especially crafted checksum.
|
Carlos Andres Ramirez <carlos_ramirez> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 8 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2023-03-28 | gray | Discussion Lock | None | ![]() |
Locked |
2023-02-11 | gray | Status | None | ![]() |
Fixed |
Assigned to | None | ![]() |
gray | ||
Open/Closed | Open | ![]() |
Closed | ||
2022-10-22 | gray | Privacy | Private | ![]() |
Public |
2022-04-30 | carlos_ramirez | Attached File | - | ![]() |
Added tar-1.34_valgrind.png, #53163 |
Attached File | - | ![]() |
Added tar-1.34_ASAN.png, #53164 | ||
2022-04-30 | carlos_ramirez | Attached File | - | ![]() |
Added vuln.tar, #53162 |
Powered by Savane 3.12.
Corresponding source code
Fixed in commit 3da78400eafcccb97e2f2fd4b227ea40d794ede8