REDHAT-BUG-251921: Medium severity ubuntu tar vulnerability
Directory traversal vulnerability was discovered in GNU tar. Vulnerability can be exploited by specially crafted tar archive to overwrite arbitrary file writable by user running tar. Problem occurs in containsdotdot function, which does not properly check names of directory symlinks.
Acknowledgements:
Red Hat would like to thank Dmitry V. Levin for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-251921?
The severity of REDHAT-BUG-251921 is considered high due to the potential for arbitrary file overwriting.
How do I fix REDHAT-BUG-251921?
To fix REDHAT-BUG-251921, update to the latest patched version of GNU tar that addresses the directory traversal vulnerability.
What systems are affected by REDHAT-BUG-251921?
The systems affected by REDHAT-BUG-251921 include those running vulnerable versions of GNU tar.
Can REDHAT-BUG-251921 be exploited remotely?
Yes, REDHAT-BUG-251921 can be exploited remotely through the distribution of specially crafted tar archives.
What are the potential impacts of exploiting REDHAT-BUG-251921?
Exploiting REDHAT-BUG-251921 may allow an attacker to overwrite arbitrary files, which could lead to unauthorized access or system compromise.