Approved changes feed: RSS · Atom
cpe:2.3:a:rxi:microtar:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rxi (b09f1bbc-160d-5844-9b91-e7ea1a96bb3e) |
|---|---|
| Product | Microtar (045a670c-b72f-5210-8227-72167c408a09) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-71267 |
vulnerable | 2026-09-16 04:32:59.466507 |
microtar Stack Buffer Overflow in mtar_write_file_header() and mtar_write_dir_header()
CRITICAL (9.8)
microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtar_header_t via strcpy(h.name, name), with no check that strlen(name) is less than 100 before the copy.
Published: 2026-08-05T12:26:14.990Z
Updated: 2026-08-10T11:46:37.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55738 |
vulnerable | 2026-07-29 01:00:28.602636 |
Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field
HIGH (8.8)
A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.
Published: 2026-06-17T13:45:00.399Z
Updated: 2026-08-10T11:44:14.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54417 |
vulnerable | 2026-07-29 01:00:27.801315 |
Integer Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS
HIGH (7.5)
An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next computes the offset to the next record as round_up(h.size, 512) + sizeof(mtar_raw_header_t) using 32-bit arithmetic.
Published: 2026-06-17T13:25:54.502Z
Updated: 2026-08-10T11:44:08.688Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-43623 |
vulnerable | 2026-07-29 00:52:13.757745 |
microtar 0.1.0 Stack-Based Buffer Overflow via raw_to_header()
HIGH (8.8)
microtar through 0.1.0 contains a stack-based buffer overflow vulnerability in the raw_to_header() function in src/microtar.c that allows attackers to corrupt adjacent stack memory by supplying a crafted TAR archive with non-null-terminated name or linkname fields. The function uses strcpy() to copy 100-byte ustar format fields that lack null terminators, causing writes of up to 355 bytes into a 100-byte destination buffer when mtar_open(), mtar_find(), or mtar_read_header() process attacker-supplied TAR archives.
Published: 2026-06-01T18:04:14.379Z
Updated: 2026-07-14T20:01:08.235Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.