Huawei EulerOS: CVE-2021-33640: libtar security update

Huawei EulerOS: CVE-2021-33640: libtar security update

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

12/19/2022

Created

03/10/2023

Added

03/09/2023

Modified

01/28/2025

Description

After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).

Solution(s)

• huawei-euleros-2_0_sp9-upgrade-libtar-help

References

• https://attackerkb.com/topics/cve-2021-33640
• CVE - 2021-33640
• EulerOS-SA-2023-1473