CVE-2021-33645: Missing Release of Memory after Effective Lifetime

The thread function doesn’t free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak...

CVE-2021-33646: Missing Release of Memory after Effective Lifetime

The thread function doesn’t free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak...

CVE-2013-4397: Undefined Security Weakness

Multiple integer overflows in the thread function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 name or 2 link in an archive, which triggers a heap-based buffer overflow...