CVE-2007-4476
Fixed in a distro release EPSS 15%
Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
Products: gnu tar, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cpio | 2.9-5 |
| Debian 12 | tar | 1.18-1 |
| Debian 13 | cpio | 2.9-5 |
| Debian 13 | tar | 1.18-1 |
| Debian 14 | cpio | 2.9-5 |
| Debian 14 | tar | 1.18-1 |
| Debian 3.1 | tar | 1.14-2.4 |
| Debian 4.0 | cpio | 2.6-18.1+etch1 |
| Debian 4.0 | tar | 1.16-2etch1 |
| Red Hat Enterprise Linux 4 | tar | 0:1.14-13.el4_8.1 |
| Red Hat Enterprise Linux 4 | tar-debuginfo | 0:1.14-13.el4_8.1 |
| Red Hat Enterprise Linux 5 | cpio | 0:2.6-23.el5_4.1 |
| Red Hat Enterprise Linux 5 | cpio-debuginfo | 0:2.6-23.el5_4.1 |
| Red Hat Enterprise Linux 5 | tar | 2:1.15.1-23.0.1.el5_4.2 |
| Red Hat Enterprise Linux 5 | tar-debuginfo | 2:1.15.1-23.0.1.el5_4.2 |