Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.

According to the version of the libtar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Multiple integer overflows in the th_read function in     lib/block.c in libtar before 1.2.20 allow remote     attackers to cause a denial of service (crash) and     possibly execute arbitrary code via a long (1) name or     (2) link in an archive, which triggers a heap-based     buffer overflow.(CVE-2013-4397)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow. (CVE-2013-4397)

The remote host is affected by the vulnerability described in GLSA-201402-19 (libtar: Arbitraty code execution)

    An integer overflow error within the &ldquo;th_read()&rdquo; function when       processing long names or link extensions can be exploited to cause a       heap-based buffer overflow via a specially crafted archive.
  Impact :

    A remote attacker could entice a user to open a specially crafted file       using a program linked against libtar, possibly resulting in execution of       arbitrary code with the privileges of the process or a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

Timo Warns reported multiple integer overflow vulnerabilities in libtar, a library for manipulating tar archives, which can result in the execution of arbitrary code.

fix CVE-2013-4397: buffer overflows by expanding a specially crafted archive

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated libtar packages fixes security vulnerability :

Two heap-based buffer overflow flaws were found in the way libtar handled certain archives. If a user were tricked into expanding a specially crafted archive, it could cause the libtar executable or an application using libtar to crash or, potentially, execute arbitrary code (CVE-2013-4397).

An updated libtar package that fixes one security issue is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The libtar package contains a C library for manipulating tar archives.
The library supports both the strict POSIX tar format and many of the commonly used GNU extensions.

Two heap-based buffer overflow flaws were found in the way libtar handled certain archives. If a user were tricked into expanding a specially crafted archive, it could cause the libtar executable or an application using libtar to crash or, potentially, execute arbitrary code. (CVE-2013-4397)

Note: This issue only affected 32-bit builds of libtar.

Red Hat would like to thank Timo Warns for reporting this issue.

All libtar users are advised to upgrade to this updated package, which contains a backported patch to correct this issue.

Two heap-based buffer overflow flaws were found in the way libtar handled certain archives. If a user were tricked into expanding a specially- crafted archive, it could cause the libtar executable or an application using libtar to crash or, potentially, execute arbitrary code. (CVE-2013-4397)

Note: This issue only affected 32-bit builds of libtar.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1418 advisory.

    [1.2.11-17.el6_4.1]
    - fix CVE-2013-4397: buffer overflows by expanding a specially-crafted archive

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
124943	EulerOS Virtualization 3.0.1.0 : libtar (EulerOS-SA-2019-1440)	Nessus	Huawei Local Security Checks	medium
88582	F5 Networks BIG-IP : libtar vulnerability (K16015326)	Nessus	F5 Networks Local Security Checks	medium
72633	GLSA-201402-19 : libtar: Arbitraty code execution	Nessus	Gentoo Local Security Checks	medium
71442	Debian DSA-2817-1 : libtar - Integer overflow	Nessus	Debian Local Security Checks	medium
70816	Fedora 20 : libtar-1.2.11-27.fc20 (2013-18877)	Nessus	Fedora Local Security Checks	medium
70529	Fedora 19 : libtar-1.2.11-26.fc19 (2013-18808)	Nessus	Fedora Local Security Checks	medium
70520	Mandriva Linux Security Advisory : libtar (MDVSA-2013:253)	Nessus	Mandriva Local Security Checks	medium
70511	Fedora 18 : libtar-1.2.11-25.fc18 (2013-18785)	Nessus	Fedora Local Security Checks	medium
70400	CentOS 6 : libtar (CESA-2013:1418)	Nessus	CentOS Local Security Checks	medium
70394	Scientific Linux Security Update : libtar on SL6.x i386/x86_64 (20131010)	Nessus	Scientific Linux Local Security Checks	medium
70387	RHEL 6 : libtar (RHSA-2013:1418)	Nessus	Red Hat Local Security Checks	medium
70386	Oracle Linux 6 : libtar (ELSA-2013-1418)	Nessus	Oracle Linux Local Security Checks	critical

Detections

Analytics

CVE-2013-4397

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical