PT-2018-15483 · Rust · Tar Crate
Max Justicz
·
Published
2018-06-29
·
Updated
2021-08-25
·
CVE-2018-20990
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
tar crate versions prior to 0.4.16
Description
An issue in the tar crate allows arbitrary file overwrite via a symlink or hardlink in a TAR archive. When unpacking a tarball, tarballs with hard links or symlinks can be used to overwrite any file on the filesystem. This occurs because tarballs can contain multiple entries for the same file, and a tarball with an entry for a hard link or symlink pointing to any file on the filesystem can have the link created, allowing any file to be rewritten on the filesystem.
Recommendations
For versions prior to 0.4.16, update to version 0.4.16 to resolve the issue. As a temporary workaround, consider avoiding the use of the
unpack in-family of functions when unpacking tarballs from untrusted sources. Restrict access to tarballs with hard links or symlinks to minimize the risk of exploitation.Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tar Crate