Out-of-Bounds Read in Tar File Handling in OpenEuler

CVE-2021-33643

What is CVE-2021-33643?

A vulnerability in the tar file handling of OpenEuler can allow an attacker to trigger an out-of-bounds read condition. This occurs when a specially crafted tar file is submitted with a header size set to zero, which may lead to a call to malloc(0) for a specific variable. If exploited, this could potentially result in unexpected application behavior, making systems vulnerable to further attacks or compromise.

References