Red Hat Security AdvisoryRHSA-2013:1418
libtar security update
Released 2013-10-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libtar-1.2.11-17.el6_4.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtar-1.2.11-17.el6_4.1, libtar-devel-1.2.11-17.el6_4.1
- Red Hat Enterprise Linux HPC Node (v. 6) libtar-1.2.11-17.el6_4.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtar-1.2.11-17.el6_4.1, libtar-devel-1.2.11-17.el6_4.1
- Red Hat Enterprise Linux Server (v. 6) libtar-1.2.11-17.el6_4.1
- Red Hat Enterprise Linux Server Optional (v. 6) libtar-1.2.11-17.el6_4.1, libtar-1.2.11-17.el6_4.1.ppc, libtar-devel-1.2.11-17.el6_4.1 +1
- Red Hat Enterprise Linux Workstation (v. 6) libtar-1.2.11-17.el6_4.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtar-1.2.11-17.el6_4.1, libtar-devel-1.2.11-17.el6_4.1
Fixes 1 record
Priority LOW 38
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05491 · Published 2013-10-17 · Fixed CWE-189
