GNU Tar through 1.30, when –sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different users process (e.g., a system backup running as root).
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tar | Gnu | * | 1.30 (including) |
| Tar | Ubuntu | bionic | * |
| Tar | Ubuntu | cosmic | * |
| Tar | Ubuntu | trusty | * |
| Tar | Ubuntu | trusty/esm | * |
| Tar | Ubuntu | upstream | * |
| Tar | Ubuntu | xenial | * |