PT-2022-10275 · Libtar · Libtar

Published 2022-12-09 · Updated 2025-04-02 · CVE-2021-33640

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libtar (affected versions not specified)

Description The issue arises after tar close() is called, where libtar.c releases the memory pointed to by pointer t. However, the list() function continues to use pointer t, specifically in the call to free longlink longname(t->th buf), resulting in the use of released memory, which is a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

AZL-12933

AZL-34950

CVE-2021-33640

MGASA-2022-0488

OESA-2022-2129

OESA-2023-1008

Affected Products

Libtar

References · 18

• https://openeuler.org/en/security/cve/detail/?cveId=CVE-2021-33640&packageName=libtar · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0488.html · Security Note
• https://osv.dev/vulnerability/CVE-2021-33640 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-12933 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33640 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1008 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-34950 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0488 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2129 · Vendor Advisory
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2129 · Note
• https://bugs.mageia.org/show_bug.cgi?id=31337 · Note
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1008 · Note