CVE-2021-33646

The thread function doesn’t free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak...

CVE-2021-33645

The thread function doesn’t free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak...

Denial Of Service (DoS)

libtar.so is vulnerable to denial of service DoS. It is possible because the thread function in lib/block.c does not check the name and link parameters in archive, allowing the attackers to cause heap-based buffer overflow...

Denial Of Service (DoS)

libtar.so is vulnerable to denial of service DoS. It is possible because the thread function in lib/block.c does not check the name and link parameters in archive, allowing the attackers to cause heap-based buffer overflow...

CVE-2013-4397

Multiple integer overflows in the thread function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 name or 2 link in an archive, which triggers a heap-based buffer overflow...

libtar: Heap-based buffer overflows by expanding a specially-crafted archive

Multiple integer overflows in the thread function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 name or 2 link in an archive, which triggers a heap-based buffer overflow...