Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.2%
CVSS Severity
CVSS v3 Score 4.7
CVSS v2 Score 1.9
References
Products affected by CVE-2018-20482
  • Gnu » Tar » Version: N/A
    cpe:2.3:a:gnu:tar:-
  • Gnu » Tar » Version: 1.11
    cpe:2.3:a:gnu:tar:1.11
  • Gnu » Tar » Version: 1.11.1
    cpe:2.3:a:gnu:tar:1.11.1
  • Gnu » Tar » Version: 1.11.8
    cpe:2.3:a:gnu:tar:1.11.8
  • Gnu » Tar » Version: 1.12
    cpe:2.3:a:gnu:tar:1.12
  • Gnu » Tar » Version: 1.13
    cpe:2.3:a:gnu:tar:1.13
  • Gnu » Tar » Version: 1.13.11
    cpe:2.3:a:gnu:tar:1.13.11
  • Gnu » Tar » Version: 1.13.14
    cpe:2.3:a:gnu:tar:1.13.14
  • Gnu » Tar » Version: 1.13.16
    cpe:2.3:a:gnu:tar:1.13.16
  • Gnu » Tar » Version: 1.13.17
    cpe:2.3:a:gnu:tar:1.13.17
  • Gnu » Tar » Version: 1.13.18
    cpe:2.3:a:gnu:tar:1.13.18
  • Gnu » Tar » Version: 1.13.19
    cpe:2.3:a:gnu:tar:1.13.19
  • Gnu » Tar » Version: 1.13.25
    cpe:2.3:a:gnu:tar:1.13.25
  • Gnu » Tar » Version: 1.13.5
    cpe:2.3:a:gnu:tar:1.13.5
  • Gnu » Tar » Version: 1.14
    cpe:2.3:a:gnu:tar:1.14
  • Gnu » Tar » Version: 1.14.1
    cpe:2.3:a:gnu:tar:1.14.1
  • Gnu » Tar » Version: 1.14.90
    cpe:2.3:a:gnu:tar:1.14.90
  • Gnu » Tar » Version: 1.15
    cpe:2.3:a:gnu:tar:1.15
  • Gnu » Tar » Version: 1.15.1
    cpe:2.3:a:gnu:tar:1.15.1
  • Gnu » Tar » Version: 1.15.90
    cpe:2.3:a:gnu:tar:1.15.90
  • Gnu » Tar » Version: 1.15.91
    cpe:2.3:a:gnu:tar:1.15.91
  • Gnu » Tar » Version: 1.16
    cpe:2.3:a:gnu:tar:1.16
  • Gnu » Tar » Version: 1.16.1
    cpe:2.3:a:gnu:tar:1.16.1
  • Gnu » Tar » Version: 1.17
    cpe:2.3:a:gnu:tar:1.17
  • Gnu » Tar » Version: 1.18
    cpe:2.3:a:gnu:tar:1.18
  • Gnu » Tar » Version: 1.19
    cpe:2.3:a:gnu:tar:1.19
  • Gnu » Tar » Version: 1.20
    cpe:2.3:a:gnu:tar:1.20
  • Gnu » Tar » Version: 1.21
    cpe:2.3:a:gnu:tar:1.21
  • Gnu » Tar » Version: 1.22
    cpe:2.3:a:gnu:tar:1.22
  • Gnu » Tar » Version: 1.23
    cpe:2.3:a:gnu:tar:1.23
  • Gnu » Tar » Version: 1.24
    cpe:2.3:a:gnu:tar:1.24
  • Gnu » Tar » Version: 1.25
    cpe:2.3:a:gnu:tar:1.25
  • Gnu » Tar » Version: 1.26
    cpe:2.3:a:gnu:tar:1.26
  • Gnu » Tar » Version: 1.27
    cpe:2.3:a:gnu:tar:1.27
  • Gnu » Tar » Version: 1.27.1
    cpe:2.3:a:gnu:tar:1.27.1
  • Gnu » Tar » Version: 1.28
    cpe:2.3:a:gnu:tar:1.28
  • Gnu » Tar » Version: 1.29
    cpe:2.3:a:gnu:tar:1.29
  • Gnu » Tar » Version: 1.30
    cpe:2.3:a:gnu:tar:1.30
  • Debian » Debian Linux » Version: 8.0
    cpe:2.3:o:debian:debian_linux:8.0
  • Debian » Debian Linux » Version: 9.0
    cpe:2.3:o:debian:debian_linux:9.0
  • Opensuse » Leap » Version: 15.0
    cpe:2.3:o:opensuse:leap:15.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved