CVE-2018-20482CWE-835

CVE-2018-20482

Medium · published December 26, 2018

CVSS v3.1
4.7
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00530 · 43.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2018-12-26T23:29Z
Affected products (4)
ProductVersionsFixed in
gnu/tar≤ 1.30—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
opensuse/leapall versions—
References (21)
http://git.savannah.gnu.org/cgit/tar.git/commit/?id=c15c42ccd1e2377945fd0414eca1a49294bff454 · [email protected]http://lists.gnu.org/archive/html/bug-tar/2018-12/msg00023.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html · [email protected]http://www.securityfocus.com/bid/106354 · [email protected]https://lists.debian.org/debian-lts-announce/2018/12/msg00023.html · [email protected]https://lists.debian.org/debian-lts-announce/2021/11/msg00025.html · [email protected]https://news.ycombinator.com/item?id=18745431 · [email protected]https://security.gentoo.org/glsa/201903-05 · [email protected]https://twitter.com/thatcks/status/1076166645708668928 · [email protected]https://utcc.utoronto.ca/~cks/space/blog/sysadmin/TarFindingTruncateBug · [email protected]http://git.savannah.gnu.org/cgit/tar.git/commit/?id=c15c42ccd1e2377945fd0414eca1a49294bff454 · af854a3a-2127-422b-91ae-364da2661108http://lists.gnu.org/archive/html/bug-tar/2018-12/msg00023.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/106354 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2018/12/msg00023.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2021/11/msg00025.html · af854a3a-2127-422b-91ae-364da2661108https://news.ycombinator.com/item?id=18745431 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201903-05 · af854a3a-2127-422b-91ae-364da2661108https://twitter.com/thatcks/status/1076166645708668928 · af854a3a-2127-422b-91ae-364da2661108https://utcc.utoronto.ca/~cks/space/blog/sysadmin/TarFindingTruncateBug · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 26 DEC 18:00Z
    GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read…
    cvelistv5