Lucene search
+L

3 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.9 views

The vulnerability of the sparse_dump_region function in the GNU Tar archive utility, which involves reading beyond the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the sparsedumpregion function in the GNU Tar archive manager is related to reading beyond the buffer boundaries when the --sparse flag is used. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

4.7CVSS6.7AI score0.00526EPSS
SaveExploits1References8Affected Software3
CNVD
CNVD
added 2018/12/27 12:0 a.m.7 views

GNU tar Denial of Service Vulnerability

GNU Tar is a set of tools developed by the GNU Project for creating files in tar format. A security vulnerability exists in GNU Tar versions 1.30 and earlier, which stems from the program's failure to properly handle file shrinking. A local attacker can exploit this vulnerability by modifying the...

4.7CVSS6.8AI score0.00526EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/26 6:29 p.m.4 views

ALPINE-CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS6.4AI score0.00526EPSS
SaveExploits1References1
Rows per page
Query Builder