CVE-2021-20193

2021-03-2616:41:23

CWE-401

redhat

www.cve.org

tar

memory consumption

system availability

vulnerability

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "product": "tar",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.33 and earlier"
      }
    ]
  }
]