VULNERABILITY INTELLIGENCE
CVE-2010-0624
CVSS score6.8 MEDIUM
EPSS probability4.75%
CISA KEVNot currently listed
Published2010-03-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer