VDB
GCVE-110-MAGEIA-2019-34
GCVE-110-MAGEIA-2019-34
Advisory Published
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage
during read access, which allows local users to cause a denial of
service (infinite read loop in sparse_dump_region in sparse.c) by
modifying a file that is supposed to be archived by a different user's
process (e.g., a system backup running as root).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | tar | 0 (affected), 1.31-1.mga6 (unaffected), 0 (affected), 1.31-1.mga6 (unaffected) | — |
| Mageia | youtube-dl | 0 (affected), 2019.04.30-1.mga6 (unaffected) | — |
Aliases
References
youtube-dl maintenance update
advisory
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.