CVE-2007-4476

Publication date 5 September 2007

Last updated 24 July 2024

Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."

Status

Show unmaintained releases

Package	Ubuntu Release	Status
cpio	8.10 intrepid	Not affected
	8.04 LTS hardy	Not affected
	7.10 gutsy	Fixed 2.8-1ubuntu2.2
	7.04 feisty	Fixed 2.6-17ubuntu0.7.04.1
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Fixed 2.6-10ubuntu0.3
tar	8.10 intrepid	Not affected
	8.04 LTS hardy	Not affected
	7.10 gutsy	Fixed 1.18-2ubuntu1.1
	7.04 feisty	Ignored end of life, was needed
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Fixed 1.15.1-2ubuntu2.3

1.19 has the fixes, 1.18 as included in Gutsy does not

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
cpio	Other: https://bugs.launchpad.net/ubuntu/+source/cpio/+bug/161173 Vendor: http://www.debian.org/security/2008/dsa-1566
tar	Vendor: http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=tar-paxlib-owl-alloca.patch;att=1;bug=441444