Description
A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rxi | microtar | 0.1.0 | — |
References
- https://github.com/rxi/microtar/blob/master/src/microtar.c#L111 product
- https://github.com/rxi/microtar product
- Vulnerable source code: src/microtar.c (raw_to_header) technical-description