Test ID:	1.3.6.1.4.1.25623.1.0.891623
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-1623-1)
Summary:	The remote host is missing an update for the Debian 'tar' package(s) announced via the DLA-1623-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'tar' package(s) announced via the DLA-1623-1 advisory. Vulnerability Insight: It was discovered that there was a potential denial of service vulnerability in tar, the GNU version of the tar UNIX archiving utility. The --sparse argument looped endlessly if the file shrank whilst it was being read. Tar would only break out of this endless loop if the file grew again to (or beyond) its original end of file. For Debian 8 Jessie, this issue has been fixed in tar version 1.27.1-2+deb8u2. We recommend that you upgrade your tar packages. Affected Software/OS: 'tar' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 1.9 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-20482 BugTraq ID: 106354 http://www.securityfocus.com/bid/106354 https://security.gentoo.org/glsa/201903-05 http://git.savannah.gnu.org/cgit/tar.git/commit/?id=c15c42ccd1e2377945fd0414eca1a49294bff454 http://lists.gnu.org/archive/html/bug-tar/2018-12/msg00023.html https://news.ycombinator.com/item?id=18745431 https://twitter.com/thatcks/status/1076166645708668928 https://utcc.utoronto.ca/~cks/space/blog/sysadmin/TarFindingTruncateBug https://lists.debian.org/debian-lts-announce/2018/12/msg00023.html https://lists.debian.org/debian-lts-announce/2021/11/msg00025.html SuSE Security Announcement: openSUSE-SU-2019:1237 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.