CVE-2021-33645 The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a…

Description

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
libtar 1.2	premières → < 1.2.21	1.2.21

Autres CVE de libtar

Les 4 CVE de libtar →

CVE-2021-33643 An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of… 6.5 Moyenne CVE-2021-33644 An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of… Non notée CVE-2021-33646 The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a… Non notée