PT-2018-2738 · Gnu+4 · Gnu Tar+4

Chris Siebenmann

·

Published

2018-12-26

·

Updated

2024-06-15

·

CVE-2018-20482

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GNU Tar versions 1.30 and earlier
Description The issue is related to the sparse dump region function in GNU Tar, which mishandles file shrinkage during read access when the --sparse flag is used. This can be exploited by local users to cause a denial of service, resulting in an infinite read loop, by modifying a file that is supposed to be archived by a different user's process, such as a system backup running as root. The vulnerability can also be exploited remotely to cause a denial of service.
Recommendations For GNU Tar versions 1.30 and earlier, consider disabling the --sparse flag as a temporary workaround to prevent exploitation until a patch is available. Restrict access to the sparse dump region function in sparse.c to minimize the risk of denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Infinite Loop

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2018-2972
ALT-PU-2019-1004
BDU:2019-01641
BDU:2019-01642
CVE-2018-20482
DLA-1623-1
DLA-2830-1
MGASA-2019-0034
OPENSUSE-SU-2019:1237-1
OPENSUSE-SU-2019_1237-1
OPENSUSE-SU-2022_1548-1
OPENSUSE-SU-2024:11422-1
SUSE-SU-2019:0926-1
SUSE-SU-2019:14215-1
SUSE-SU-2019_0926-1
SUSE-SU-2019_14215-1
SUSE-SU-2020:2806-1
SUSE-SU-2020_2806-1
SUSE-SU-2022:1548-1
SUSE-SU-2022_1548-1
USN-4692-1

Affected Products

Alt Linux
Gnu Tar
Linuxmint
Suse
Ubuntu