Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24021
HistoryApr 10, 2020 - 12:44 a.m.

Arbitrary Code Execution

2020-04-1000:44:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

EPSS

0.013

Percentile

85.9%

JSON

tar is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way tar expanded archive files. If a user were tricked into expanding a specially-crafted archive, it could cause the tar executable to crash or execute arbitrary code with the privileges of the user running tar.

References

Related

openvas 42
nessus 43
freebsd 1
oraclelinux 5
cve 1
redhat 6
fedora 6
centos 5
cvelist 1
gentoo 2
nvd 1
securityvulns 1
prion 1
debiancve 1
ubuntucve 1
osv 2
ubuntu 1
ibm 1
seebug 1
vmware 2
openvas
openvas
Gentoo Security Advisory GLSA 201111-11 (tar)
2012-02-12 00:00:00
RedHat Update for tar RHSA-2010:0142-01
2010-03-22 00:00:00
Fedora Update for cpio FEDORA-2010-4321
2010-03-22 00:00:00
nessus
nessus
Oracle Linux 4 : cpio (ELSA-2010-0143)
2013-07-12 00:00:00
SuSE 10 Security Update : cpio (ZYPP Patch Number 6948)
2010-10-11 00:00:00
openSUSE Security Update : tar (openSUSE-SU-2010:0189-1)
2010-05-01 00:00:00
freebsd
freebsd
gtar -- buffer overflow in rmt client
2010-03-24 00:00:00
oraclelinux
oraclelinux
tar security update
2010-03-15 00:00:00
cpio security update
2010-03-15 00:00:00
cpio security update
2010-03-15 00:00:00
cve
cve
CVE-2010-0624
2010-03-15 13:28:25
redhat
redhat
(RHSA-2010:0142) Moderate: tar security update
2010-03-15 00:00:00
(RHSA-2010:0143) Moderate: cpio security update
2010-03-15 00:00:00
(RHSA-2010:0141) Moderate: tar security update
2010-03-15 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: cpio-2.10-6.fc13
2010-03-20 03:37:13
[SECURITY] Fedora 11 Update: cpio-2.9.90-8.fc11
2010-03-27 00:57:44
[SECURITY] Fedora 11 Update: tar-1.22-5.fc11
2010-03-27 01:00:53
centos
centos
cpio security update
2010-03-17 15:35:58
tar security update
2010-03-17 15:26:37
tar security update
2010-03-16 12:59:13
cvelist
cvelist
CVE-2010-0624
2010-03-12 20:00:00
gentoo
gentoo
GNU Tar: User-assisted execution of arbitrary code
2011-11-20 00:00:00
cpio: Arbitrary code execution
2013-11-28 00:00:00
nvd
nvd
CVE-2010-0624
2010-03-15 13:28:25
securityvulns
securityvulns
GNU tar / cpio buffer overflow
2010-03-11 00:00:00
prion
prion
Heap overflow
2010-03-15 13:28:00
debiancve
debiancve
CVE-2010-0624
2010-03-15 13:28:25
ubuntucve
ubuntucve
CVE-2010-0624
2010-03-15 00:00:00
osv
osv
tar-1.29-2.1 on GA media
2024-06-15 00:00:00
cpio-2.12-3.90 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
GNU cpio vulnerabilities
2015-01-08 00:00:00
ibm
ibm
Security Bulletin: IBM Flex System Manager (FSM) is affected by tar vulnerabilities (CVE-2010-0624 CVE-2016-6321)
2018-06-18 01:35:37
seebug
seebug
VMware ESX Service Consoleๅคšไธชๅฎ‰ๅ…จๆผๆดž
2012-01-13 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
VMware ESX third party updates for Service Console
2010-08-31 00:00:00

EPSS

0.013

Percentile

85.9%

JSON
Related for VERACODE:24021
openvas42nessus43freebsd1oraclelinux5cve1redhat6fedora6centos5cvelist1gentoo2nvd1securityvulns1prion1debiancve1ubuntucve1osv2ubuntu1ibm1seebug1vmware2