CVE-2021-33645: High severity Feep Libtar vulnerability
Last updated 31 March 2025
Other sources
The thread() function doesn’t free a variable t->thbuf.gnulonglink after allocating memory, which may cause a memory leak.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libtarto a version that resolves this vulnerability.Fixed in 1.2.20-8+deb12u1~deb11u1Fixed in 1.2.20-8+deb12u1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-33645?
CVE-2021-33645 is classified as a medium-severity vulnerability due to the potential for memory leaks.
How do I fix CVE-2021-33645?
To fix CVE-2021-33645, update the affected software to a version that includes the patch for the memory leak.
Which software is affected by CVE-2021-33645?
CVE-2021-33645 affects multiple versions of libtar prior to 1.2.21 and specific versions of Huawei openEuler and Fedora.
What impact does CVE-2021-33645 have on the system?
CVE-2021-33645 can cause memory leaks, potentially leading to degraded system performance or crashes over time.
Is CVE-2021-33645 a zero-day vulnerability?
CVE-2021-33645 was not reported as a zero-day vulnerability but poses a risk if not patched in affected software.