Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Tar 安全漏洞
Vulnerability Description
GNU Tar是GNU计划开发的一套用于创建tar格式文件的工具。 GNU Tar 1.30及之前版本中存在安全漏洞，该漏洞源于程序没有正确地处理文件的收缩过程。本地攻击者可通过修改文件利用该漏洞造成拒绝服务（sparse.c文件的‘sparse_dump_region’函数无限读取循环）。
CVSS Information
N/A
Vulnerability Type
N/A