CVE-2013-4397

CVE-2013-4397 describes multiple integer overflows in the libtar library (versions prior to 1.2.20), specifically within the th_read function, impacting products like Red Hat Enterprise Linux. This vulnerability allows remote attackers to trigger a denial of service or potentially arbitrary code execution through crafted archive files containing excessively long names or links. With a CVSS score of 6.8, it represents a medium-severity risk, requiring moderate attack complexity but potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.