USN-7398-1

Dashboard / Vulnerabilities / USN-7398-1

USN-7398-1

Summary: libtar vulnerabilities

Details: It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2021-33643, CVE-2021-33644) It was discovered that libtar contained a memory leak due to failing to free a variable, causing performance degradation. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service. (CVE-2021-33645, CVE-2021-33646)

References: https://ubuntu.com/security/notices/USN-7398-1, https://ubuntu.com/security/CVE-2021-33643, https://ubuntu.com/security/CVE-2021-33644, https://ubuntu.com/security/CVE-2021-33645, https://ubuntu.com/security/CVE-2021-33646