Description (CNA)
A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| rxi / microtar | affected 0.1.0 |
CWE
CWE-121, CWE-170
References
- https://github.com/rxi/microtar/blob/master/src/microtar.c#L111
- https://github.com/rxi/microtar
- https://raw.githubusercontent.com/rxi/microtar/master/src/microtar.c
ADP enrichment
No English description supplied.
No references supplied.