PT-2018-2738 · Gnu+4 · Gnu Tar+4
Chris Siebenmann
·
Publicado
2018-12-26
·
Atualizado
2024-06-15
·
CVE-2018-20482
CVSS v3.1
4.7
Média
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Tar versions 1.30 and earlier
Description
The issue is related to the
sparse dump region function in GNU Tar, which mishandles file shrinkage during read access when the --sparse flag is used. This can be exploited by local users to cause a denial of service, resulting in an infinite read loop, by modifying a file that is supposed to be archived by a different user's process, such as a system backup running as root. The vulnerability can also be exploited remotely to cause a denial of service.Recommendations
For GNU Tar versions 1.30 and earlier, consider disabling the
--sparse flag as a temporary workaround to prevent exploitation until a patch is available. Restrict access to the sparse dump region function in sparse.c to minimize the risk of denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Infinite Loop
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Gnu Tar
Linuxmint
Suse
Ubuntu