CyberRota Analysis
AI-GeneratedGNU tar is vulnerable due to a TOCTOU (Time-of-Check Time-of-Use) flaw in its incremental dumpdir 'X' rename handling, allowing local attackers with write access to influence the restoration process. This can lead to unauthorized file modifications or privilege escalation, as files may be created, renamed, or overwritten outside the intended extraction directory. Organizations utilizing GNU tar for backup and restore operations should prioritize addressing this vulnerability to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)