Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-0624

Опубликовано: 15 мар. 2010
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:cpio:*:*:*:*:*:*:*:*
Версия до 2.10 (включая)
cpe:2.3:a:gnu:cpio:1.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:1.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:1.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:2.4-2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:2.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:2.5.90:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:2.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:2.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:2.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cpio:2.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*
Версия до 1.22 (включая)
cpe:2.3:a:gnu:tar:1.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.17:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.13.25:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.14.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.14.90:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.15:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.15.90:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.15.91:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.16.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.17:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.20:*:*:*:*:*:*:*
cpe:2.3:a:gnu:tar:1.21:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.01858
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 15 лет назад

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.

redhat
больше 15 лет назад

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.

debian
больше 15 лет назад

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib. ...

github
около 3 лет назад

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.

fstec
больше 15 лет назад

Уязвимость операционной системы CentOS, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 82%
0.01858
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119