Lucene search
+L

GNU tar Denial of Service Vulnerability

🗓️ 27 Dec 2018 00:00:00Reported by China National Vulnerability DatabaseType 
cnvd
 cnvd
🔗 www.cnvd.org.cn👁 19 Views

GNU Tar versions 1.30 and earlier have a denial of service due to improper handling of file shrinking, enabling locals to trigger an infinite read loop in sparse_dump_region.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: GNU Tar sparse_dump_region function denial of service affects IBM Spectrum LSF Application Center
8 Mar 201905:15
–ibm
alpinelinux
AlpineLinux
CVE-2018-20482
26 Dec 201818:00
–alpinelinux
archlinux
ArchLinux
[ASA-201901-1] tar: denial of service
8 Jan 201900:00
–archlinux
bdu_fstec
BDU FSTEC
GNU Tar Buffer Overflow DoS
25 Apr 201900:00
–bdu_fstec
cloudfoundry
Cloud Foundry
USN-4692-1: tar vulnerabilities | Cloud Foundry
10 Feb 202100:00
–cloudfoundry
cve
CVE
CVE-2018-20482
26 Dec 201818:00
–cve
cvelist
Cvelist
CVE-2018-20482
26 Dec 201818:00
–cvelist
debian
Debian
[SECURITY] [DLA 1623-1] tar security update
31 Dec 201809:51
–debian
debian
Debian
[SECURITY] [DLA 2830-1] tar security update
28 Nov 202112:39
–debian
debiancve
Debian CVE
CVE-2018-20482
26 Dec 201818:00
–debiancve
Rows per page
Vulners
Node
gnutarRange≤1.30

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Jan 2019 00:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 21.9
CVSS 3.14.7
EPSS0.0053
19