Out-of-Bounds Read in GNU Tar for OpenEuler
CVE-2021-33644
8.1HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-33644?
A vulnerability in GNU Tar allows attackers to exploit crafted tar files. By manipulating the header size to zero, this flaw can lead to an out-of-bounds read, potentially impacting the stability and security of the system. This issue affects multiple versions of the GNU Tar software and requires immediate attention from users of OpenEuler to mitigate associated risks.
Affected Version(s)
libtar <1.2.21
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.