Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2010-0624

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 86.2%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2010-0624
  • Gnu » Cpio » Version: N/A
    cpe:2.3:a:gnu:cpio:-
  • Gnu » Cpio » Version: 1.0
    cpe:2.3:a:gnu:cpio:1.0
  • Gnu » Cpio » Version: 1.1
    cpe:2.3:a:gnu:cpio:1.1
  • Gnu » Cpio » Version: 1.2
    cpe:2.3:a:gnu:cpio:1.2
  • Gnu » Cpio » Version: 1.3
    cpe:2.3:a:gnu:cpio:1.3
  • Gnu » Cpio » Version: 2.10
    cpe:2.3:a:gnu:cpio:2.10
  • Gnu » Cpio » Version: 2.4-2
    cpe:2.3:a:gnu:cpio:2.4-2
  • Gnu » Cpio » Version: 2.5
    cpe:2.3:a:gnu:cpio:2.5
  • Gnu » Cpio » Version: 2.5.90
    cpe:2.3:a:gnu:cpio:2.5.90
  • Gnu » Cpio » Version: 2.6
    cpe:2.3:a:gnu:cpio:2.6
  • Gnu » Cpio » Version: 2.7
    cpe:2.3:a:gnu:cpio:2.7
  • Gnu » Cpio » Version: 2.8
    cpe:2.3:a:gnu:cpio:2.8
  • Gnu » Cpio » Version: 2.9
    cpe:2.3:a:gnu:cpio:2.9
  • Gnu » Tar » Version: N/A
    cpe:2.3:a:gnu:tar:-
  • Gnu » Tar » Version: 1.11
    cpe:2.3:a:gnu:tar:1.11
  • Gnu » Tar » Version: 1.11.1
    cpe:2.3:a:gnu:tar:1.11.1
  • Gnu » Tar » Version: 1.11.8
    cpe:2.3:a:gnu:tar:1.11.8
  • Gnu » Tar » Version: 1.12
    cpe:2.3:a:gnu:tar:1.12
  • Gnu » Tar » Version: 1.13
    cpe:2.3:a:gnu:tar:1.13
  • Gnu » Tar » Version: 1.13.11
    cpe:2.3:a:gnu:tar:1.13.11
  • Gnu » Tar » Version: 1.13.14
    cpe:2.3:a:gnu:tar:1.13.14
  • Gnu » Tar » Version: 1.13.16
    cpe:2.3:a:gnu:tar:1.13.16
  • Gnu » Tar » Version: 1.13.17
    cpe:2.3:a:gnu:tar:1.13.17
  • Gnu » Tar » Version: 1.13.18
    cpe:2.3:a:gnu:tar:1.13.18
  • Gnu » Tar » Version: 1.13.19
    cpe:2.3:a:gnu:tar:1.13.19
  • Gnu » Tar » Version: 1.13.25
    cpe:2.3:a:gnu:tar:1.13.25
  • Gnu » Tar » Version: 1.13.5
    cpe:2.3:a:gnu:tar:1.13.5
  • Gnu » Tar » Version: 1.14
    cpe:2.3:a:gnu:tar:1.14
  • Gnu » Tar » Version: 1.14.1
    cpe:2.3:a:gnu:tar:1.14.1
  • Gnu » Tar » Version: 1.14.90
    cpe:2.3:a:gnu:tar:1.14.90
  • Gnu » Tar » Version: 1.15
    cpe:2.3:a:gnu:tar:1.15
  • Gnu » Tar » Version: 1.15.1
    cpe:2.3:a:gnu:tar:1.15.1
  • Gnu » Tar » Version: 1.15.90
    cpe:2.3:a:gnu:tar:1.15.90
  • Gnu » Tar » Version: 1.15.91
    cpe:2.3:a:gnu:tar:1.15.91
  • Gnu » Tar » Version: 1.16
    cpe:2.3:a:gnu:tar:1.16
  • Gnu » Tar » Version: 1.16.1
    cpe:2.3:a:gnu:tar:1.16.1
  • Gnu » Tar » Version: 1.17
    cpe:2.3:a:gnu:tar:1.17
  • Gnu » Tar » Version: 1.18
    cpe:2.3:a:gnu:tar:1.18
  • Gnu » Tar » Version: 1.19
    cpe:2.3:a:gnu:tar:1.19
  • Gnu » Tar » Version: 1.20
    cpe:2.3:a:gnu:tar:1.20
  • Gnu » Tar » Version: 1.21
    cpe:2.3:a:gnu:tar:1.21
  • Gnu » Tar » Version: 1.22
    cpe:2.3:a:gnu:tar:1.22


Contact Us

Shodan ® - All rights reserved