CVE-2010-0624: Buffer Overflow
A heap-based buffer overflow flaw was found in the way tar and cpio archive manipulation tools expanded archives with certain character in the archive name. If a local user was tricked into expanding a specially-crafted archive, it could cause the tar, cpio executables to crash or, potentially, to execute arbitrary code with the privileges of the user running the utility.
Link to advisory: [1] http://www.agrs.tu-berlin.de/index.php?id=78327
Acknowledgements:
Red Hat would like to thank Jakob Lell for responsibly reporting this issue.
Other sources
Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0624?
CVE-2010-0624 has a medium severity rating due to the potential for a heap-based buffer overflow that can lead to crashes or arbitrary code execution.
How do I fix CVE-2010-0624?
To fix CVE-2010-0624, you should upgrade to a patched version of GNU tar or GNU cpio, which resolves the buffer overflow vulnerability.
What versions of software are affected by CVE-2010-0624?
CVE-2010-0624 affects various versions of GNU tar prior to 1.22 and certain versions of GNU cpio, specifically earlier than 2.10.
Can a remote attacker exploit CVE-2010-0624?
CVE-2010-0624 is primarily an issue for local users, as it requires users to be tricked into expanding malicious archives.
What types of attacks can CVE-2010-0624 lead to?
Exploitation of CVE-2010-0624 can potentially lead to denial-of-service attacks, crashes of applications, or arbitrary code execution based on the crafted archive.