CVE-2013-4397

Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.

• CWE-189

• http://repo.or.cz/w/libtar.git/commitdiff/45448e8bae671c2f7e80b860ae0fc0cedf2bdc04Exploit, Patch
• http://rhn.redhat.com/errata/RHSA-2013-1418.htmlVendor Advisory
• http://secunia.com/advisories/55188Vendor Advisory
• http://secunia.com/advisories/55253Vendor Advisory
• http://www.debian.org/security/2013/dsa-2817
• http://www.openwall.com/lists/oss-security/2013/10/10/4
• http://www.openwall.com/lists/oss-security/2013/10/10/6
• http://www.securityfocus.com/bid/62922
• http://www.securitytracker.com/id/1029166
• http://www.securitytracker.com/id/1040106
• https://lists.feep.net:8080/pipermail/libtar/2013-October/000361.html
• https://source.android.com/security/bulletin/2018-01-01
• http://repo.or.cz/w/libtar.git/commitdiff/45448e8bae671c2f7e80b860ae0fc0cedf2bdc04Exploit, Patch
• http://rhn.redhat.com/errata/RHSA-2013-1418.htmlVendor Advisory
• http://secunia.com/advisories/55188Vendor Advisory
• http://secunia.com/advisories/55253Vendor Advisory
• http://www.debian.org/security/2013/dsa-2817
• http://www.openwall.com/lists/oss-security/2013/10/10/4
• http://www.openwall.com/lists/oss-security/2013/10/10/6
• http://www.securityfocus.com/bid/62922
• http://www.securitytracker.com/id/1029166
• http://www.securitytracker.com/id/1040106
• https://lists.feep.net:8080/pipermail/libtar/2013-October/000361.html
• https://source.android.com/security/bulletin/2018-01-01

Published

Oct 17, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4391Integer overflow in the valid_user_field function in journal…
• CVE-2013-4392systemd, when updating file permissions, allows local users …5
• CVE-2013-4393journald in systemd, when the origin of native messages is s…
• CVE-2013-4394The SetX11Keyboard function in systemd, when PolicyKit Local…
• CVE-2013-4395Simple Machines Forum (SMF) through 2.0.5 has XSS6.1
• CVE-2013-4396Use-after-free vulnerability in the doImageText function in …
• CVE-2013-4398Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-4399The remoteClientFreeFunc function in daemon/remote.c in libv…
• CVE-2013-4400virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local…
• CVE-2013-4401The virConnectDomainXMLToNative API function in libvirt 1.1.…
• CVE-2013-4402The compressed packet parser in GnuPG 1.4.x before 1.4.15 an…
• CVE-2013-4403Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…