Information Disclosure

🗓️ 19 Mar 2021 18:37:57Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 18 Views

tar vulnerability in read_header function reveals user credentials and file content

Reporter	Title	Published	Views	Family All 110
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	7 Jun 202501:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in tar	11 Nov 202516:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Hyper Converged Database	21 Jan 202610:51	–	ibm
AlpineLinux	CVE-2021-20193	26 Mar 202116:41	–	alpinelinux
ArchLinux	[ASA-202102-41] tar: denial of service	27 Feb 202100:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в tar	20 May 202605:53	–	astralinux
Broadcom	Security updates provided in Brocade Fabric OS v9.2.0, v9.1.1c, v8.2.3d	1 Aug 202300:00	–	broadcom
Broadcom	This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory.	1 Aug 202300:00	–	broadcom
Cloud Foundry	USN-5329-1: tar vulnerability \| Cloud Foundry	23 May 202200:00	–	cloudfoundry
CNNVD	git tar.git 安全漏洞	26 Mar 202100:00	–	cnnvd

Vulners

Node

devel develMatch1.32+dfsg-1debian

AND

devel develMatch1.30+dfsg-7debian

AND

debian debian_linux

tar_project tarMatch1.32+dfsg-1debian

AND

debian debian_linuxMatch999

tar_project tarMatch1.30+dfsg-7debian

AND

debian debian_linuxMatch11

tar_project tarMatch1.32-r1os

AND

alpinelinux alpine_linuxMatch3.11

tar_project tarMatch1.33-r1os

AND

alpinelinux alpine_linuxMatch3.13

tar_project tarMatch1.32-r0os

AND

alpinelinux alpine_linuxMatch3.10

tar_project tarMatch1.32-r1os

AND

alpinelinux alpine_linuxMatch3.12

tar_project tarMatch1.32-r1os

AND

alpinelinux alpine_linuxMatchedge

hirsute hirsuteMatch1.32+dfsg-1debian

AND

hirsute hirsuteMatch1.30+dfsg-7debian

AND

debian debian_linux

google bionicMatch1.29b-2ubuntu0.2debian

AND

google bionicMatch1.29b-2ubuntu0.1debian

AND

debian debian_linux

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2021-20193
security	www.security.gentoo.org/glsa/202105-29
git	www.git.savannah.gnu.org/cgit/tar.git/commit/
savannah	www.savannah.gnu.org/bugs/

07 Nov 2023 22:56Current

1.5Low risk

Vulners AI Score1.5

CVSS 24.3

CVSS 3.13.3

EPSS0.00069