Colin Walters

Name of the Vulnerable Software and Affected Versions tar.Reader (affected versions not specified) Description tar.Reader pode alocar uma quantidade ilimitada de memória ao processar um arquivo maliciosamente criado contendo numerosas regiões esparsas codificadas usando o formato "old GNU sparse map". Isso pode levar ao consumo excessivo de memória e potencialmente causar uma condição de negação de serviço. Recommendations Atualmente, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

The issue is related to an integer overflow in the `authentication agent new cookie` function. This allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value. The exploitation of this issue can enable a local attacker to elevate their privileges.

The issue disregards the access flag of exported GObject properties, allowing local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties. This is demonstrated by properties of services such as DeviceKit-Power, NetworkManager, and ModemManager.

The vulnerability allows local attackers to bypass intended access restrictions by sending or receiving messages. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of the vulnerability can be carried out locally by an attacker who has passed the authentication procedure.