Summary
[1.2.20-17]
- fix use-after-free bugs introduced by incorrect memleak fixes (CVE-2021-33640)
[1.2.20-16]
- fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
- fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libtar | 0:1.2.20-17.el8 |
Vulnerabilities 4
-
Medium 6.5
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mall…
-
Unscored —
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mall…
-
Unscored —
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory…
-
Unscored —
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory…