CVE-2007-4476: Buffer Overflow
Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
Other sources
Common Vulnerabilities and Exposures assigned an identifier CVE-2007-4476 to the following vulnerability:
Bug in the safernamesuffix function in GNU tar may lead to a "crashing stack". It can be used to crash tar while extracting archive containing file with long name containing unsafe prefix.
Affected function is also part of cpio source code.
References:
http://www.novell.com/linux/security/advisories/200718sr.html http://lists.gnu.org/archive/html/bug-cpio/2007-08/msg00002.html
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2007-4476?
CVE-2007-4476 is considered a high severity vulnerability due to the potential for buffer overflow leading to crashes.
How do I fix CVE-2007-4476?
To fix CVE-2007-4476, update to the recommended versions of the GNU tar or cpio packages as specified by your software provider.
What systems are affected by CVE-2007-4476?
CVE-2007-4476 affects various versions of GNU tar, Debian Linux 3.1 and 4.0, and Ubuntu Linux 6.06, 7.04, and 7.10.
What type of vulnerability is CVE-2007-4476?
CVE-2007-4476 is a buffer overflow vulnerability that occurs within the safer_name_suffix function of GNU tar.
What are the potential impacts of CVE-2007-4476?
The potential impacts of CVE-2007-4476 include application crashes and the possibility of executing arbitrary code.