Msrc Cbl2 Libtar 1.2.20-11 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_libtar_1.2.20-11_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2021-33640CRITICALCVSS 9.82022-12-13

CVE-2021-33640 [MEDIUM] CWE-416 After tar_close() libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function it continues to use pointer t: free_longlink_longname(t->th_buf) . As a resul After tar_close() libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result the released memory is used (use-after-free). FAQ: Is Azure Linu