Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2018-20482 PUBLISHED CVSS 4.699999809265137 MEDIUM

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).

Risk Scores

CVSS v3.1
4.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.6tar1.29-r1, 1.29-r0, 1.28-r1
Alpine:v3.10tar1.23-r0, 1.23-r0, 1.25-r0
Alpine:v3.19tar1.30-r0, 1.30-r1, 1.30-r0
Alpine:v3.8tar1.30-r0, 1.29-r1, 1.29-r0
Alpine:v3.22tar1.28-r1, 1.30-r1, 1.30-r0
Alpine:v3.15tar1.26-r0, 1.21-r0, 1.22-r0
Alpine:v3.14tar1.27-r0, 1.23-r0, 1.23-r1
Alpine:v3.21tar1.30-r1, 0, 1.21-r0
Alpine:v3.7tar1.25-r0, 1.26-r0, 1.26-r1
Alpine:v3.9tar1.22-r0, 1.24-r0, 0
Alpine:v3.23tar1.26-r0, 1.26-r0, 1.30-r0
Alpine:v3.17tar1.23-r1, 1.30-r1, 1.30-r0
Alpine:v3.16tar1.30-r0, 0, 1.21-r0
Alpine:v3.13tar0, 1.30-r1, 1.30-r0
Alpine:v3.20tar1.30-r1, 1.30-r0, 1.29-r1
Alpine:v3.12tar1.27-r0, 1.30-r1, 1.30-r0
Alpine:v3.18tar1.21-r0, 1.30-r1, 1.30-r0
Alpine:v3.11tar0, 1.30-r1, 1.30-r0

Timeline

References

Open in Interactive Console →