CVE-2010-0624
Fixed in a distro release EPSS 5%
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cpio | 2.11-1 |
| Debian 12 | tar | 1.23-1 |
| Debian 13 | cpio | 2.11-1 |
| Debian 13 | tar | 1.23-1 |
| Debian 14 | cpio | 2.11-1 |
| Debian 14 | tar | 1.23-1 |
| Red Hat Enterprise Linux 3 | cpio | 0:2.5-6.RHEL3 |
| Red Hat Enterprise Linux 3 | cpio-debuginfo | 0:2.5-6.RHEL3 |
| Red Hat Enterprise Linux 3 | tar | 0:1.13.25-16.RHEL3 |
| Red Hat Enterprise Linux 3 | tar-debuginfo | 0:1.13.25-16.RHEL3 |
| Red Hat Enterprise Linux 4 | cpio | 0:2.5-16.el4_8.1 |
| Red Hat Enterprise Linux 4 | cpio-debuginfo | 0:2.5-16.el4_8.1 |
| Red Hat Enterprise Linux 4 | tar | 0:1.14-13.el4_8.1 |
| Red Hat Enterprise Linux 4 | tar-debuginfo | 0:1.14-13.el4_8.1 |
| Red Hat Enterprise Linux 5 | cpio | 0:2.6-23.el5_4.1 |
| Red Hat Enterprise Linux 5 | cpio-debuginfo | 0:2.6-23.el5_4.1 |
| Red Hat Enterprise Linux 5 | tar | 2:1.15.1-23.0.1.el5_4.2 |
| Red Hat Enterprise Linux 5 | tar-debuginfo | 2:1.15.1-23.0.1.el5_4.2 |
| Ubuntu 14.04 LTS | cpio | 2.11+dfsg-1ubuntu1.1 |
| openSUSE Tumbleweed | cpio | 2.12-3.90 |
| openSUSE Tumbleweed | tar | 1.29-2.1 |