Heap-based buffer overflow in Tar - CVE-2022-48303

Vulnerability identifier: #VU72432

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-48303

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the from_header() function in list.c when handling V7 archives. A remote attacker can trick the victim to open a specially crafted V7 archive, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Tar
EMC ViPR SRM
Amazon Linux AMI
Gentoo Linux
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Oracle Solaris
SUSE Linux Enterprise Server
Slackware Linux
Ubuntu
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
openSUSE Leap
openEuler
Fedora
Self Node Remediation Operator
Node Health Check Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
Data Lakehouse
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Dell Secure Connect Gateway
Netcool Operations Insight
IBM MQ Operator
IBM Cloud Transformation Advisor
Red Hat OpenShift Dev Spaces
Data Replication on Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
OpenShift API for Data Protection (OADP)
watsonx Orchestrate Developer Edition
cflinuxfs3
ObjectScale
Platform Automation Toolkit
IBM MQ Appliance
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
SmartFabric Storage Software
Red Hat OpenShift GitOps
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
QRadar Suite
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
tar (Ubuntu package)
tar
tar-debuginfo
tar-debugsource
tar-lang
tar (Red Hat package)
tar-doc
tar-help
app-arch/tar
tar-rmt-debuginfo
tar-tests
tar-tests-debuginfo
tar-backup-scripts
tar-rmt
Dell EMC Storage Monitoring and Reporting (SMR)
RecoverPoint for VMs
RSA Authentication Manager
IBM CICS TX Advanced

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Self Node Remediation Operator - update to 0.5.1
Node Health Check Operator - update to 0.6.1
Data Lakehouse - update to 1.1.0.0
Red Hat OpenShift Serverless - update to 1.27.1
OpenShift API for Data Protection (OADP) - update to 1.1.2
watsonx Orchestrate Developer Edition - update to 1.13.0
SmartFabric Storage Software - update to 1.4.3
Migration Toolkit for Containers - update to 1.7.8
QRadar Suite - update to 1.10.17.0
Multicluster Engine for Kubernetes - update to 2.1.6
OpenShift Service Mesh - addressed in versions 2.2.11, 2.3.2, 2.3.8, 2.4.4, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.5.8, 2.6.5
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.11.52, 4.12.39, 4.12.41, 4.13.2, 4.13.17, 4.14.0
OpenShift Virtualization - addressed in versions 4.11.7, 4.12.8, 4.12.9, 4.13.5
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.11.7, 4.12.2, 4.13.0
OpenShift Logging - addressed in versions 5.4.12, 5.5.8, 5.6.3
Dell Secure Connect Gateway - update to 5.16
tar (Ubuntu package) - addressed in versions Ubuntu Pro, 1.29b-2ubuntu0.4, 1.30+dfsg-7ubuntu0.20.04.3, 1.34+dfsg-1ubuntu0.1.22.04.1, 1.34+dfsg-1ubuntu0.1.22.10.1, 1.34+dfsg-1.2ubuntu0.1
cflinuxfs3 - update to 0.353.0
ObjectScale - update to 1.4.0
Netcool Operations Insight - update to 1.6.10
tar - addressed in versions 1.26, 1.29, 1.34
tar - addressed in versions 1.26-31.23, 1.34-1
tar-debuginfo - addressed in versions 1.27.1-15.18.1, 1.34-150000.3.31.1
tar - addressed in versions 1.27.1-15.18.1, 1.34-150000.3.31.1
tar-debugsource - addressed in versions 1.27.1-15.18.1, 1.34-150000.3.31.1
tar-lang - addressed in versions 1.27.1-15.18.1, 1.34-150000.3.31.1
tar (Red Hat package) - addressed in versions 1.30-5.el8_6.1, 1.30-6.el8_7.1, 1.34-6.el9_1
tar - addressed in versions 1.30-6.0.1, 1.34-4
tar-doc - addressed in versions 1.30-6.0.1, 1.34-4
tar-help - addressed in versions 1.32-3, 1.34-4
tar-debugsource - addressed in versions 1.32-3, 1.34-4
tar-debuginfo - addressed in versions 1.32-3, 1.34-4
tar - addressed in versions 1.32-3, 1.34-4
app-arch/tar - update to 1.34-r3
tar - addressed in versions 1.34-6.fc37, 1.34-8.fc38
tar-rmt-debuginfo - update to 1.34-150000.3.31.1
tar-tests - update to 1.34-150000.3.31.1
tar-tests-debuginfo - update to 1.34-150000.3.31.1
tar-backup-scripts - update to 1.34-150000.3.31.1
tar-doc - update to 1.34-150000.3.31.1
tar-rmt - update to 1.34-150000.3.31.1
IBM MQ Operator - addressed in versions 2.0.9, 2.3.1
IBM Cloud Transformation Advisor - update to 3.10.0
Red Hat OpenShift Dev Spaces - update to 3.15.0
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24, 5.1.1
Data Replication on Cloud Pak for Data - update to 4.6.4
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.5
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
EMC ViPR SRM - update to 4.9.0.0
RecoverPoint for VMs - update to 6.0.SP1.P1
RSA Authentication Manager - update to 8.7 Patch 4
IBM MQ Appliance - addressed in versions 9.3.0.6, 9.3.3
IBM CICS TX Advanced - update to 10.1.0.0 ifix18
Dell PowerProtect Cyber Recovery - update to 19.14.0.1
Robotic Process Automation for Cloud Pak - update to 21.0.7.3

• https://savannah.gnu.org/bugs/?62387
• https://savannah.gnu.org/patch/?10307

• Remote code execution in GNU Tar
• SUSE update for tar
• SUSE update for tar
• Red Hat Enterprise Linux 8 update for tar
• Red Hat Enterprise Linux 9 update for tar
• Ubuntu update for tar
• Multiple vulnerabilities in Cloud Foundry Foundation cflinuxfs3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.5
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in OpenShift Serverless
• Amazon Linux AMI update for tar
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.7
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.6
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Slackware Linux update for tar
• Heap-based buffer overflow in IBM MQ Operator
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.12
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.11
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Heap-based buffer overflow in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Heap-based buffer overflow in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.5
• Ubuntu update for tar
• VMware Tanzu Platform Automation Toolkit update for tar
• Heap-based buffer overflow in IBM CICS TX Advanced
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in Oracle Solaris third-party software
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Heap-based buffer overflow in IBM MQ Appliance
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Fedora 37 update for tar
• Fedora 38 update for tar
• Red Hat Enterprise Linux 8.6 Extended Update Support update for tar
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh for 2.4
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Red Hat OpenShift Virtualization release 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Node Health Check Operator 0.6
• IBM Data Replication on Cloud Pak for Data update for GNU Tar
• Multiple vulnerabilities in IBM QRadar Suite software
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Netcool Operations Insight
• Gentoo update for GNU Tar
• openEuler 20.03 LTS SP1 update for tar
• openEuler 20.03 LTS SP3 update for tar
• openEuler 22.03 LTS update for tar
• openEuler 22.03 LTS SP1 update for tar
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Amazon Linux AMI update for tar
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Anolis OS update for tar
• Anolis OS update for tar
• Dell SmartFabric Storage Software update for third-party components
• RSA Authentication Manager update for third-party components
• IBM watsonx Orchestrate Developer Edition update for GNU Tar