CVE-2021-33645: High severity centos libtar vulnerability
Published Aug 9, 2022
·Updated
Last updated 31 March 2025
Other sources
The thread() function doesn’t free a variable t->thbuf.gnulonglink after allocating memory, which may cause a memory leak.
— MITRE
Affected Software
11 affected componentsFixes available
Feep Libtar<1.2.21
Huawei Openeuler=20.03-sp1
Huawei Openeuler=20.03-sp3
Huawei Openeuler=22.03
Fedoraproject Fedora=35
Fedoraproject Fedora=36
Fedoraproject Fedora=37
debian/libtar<=1.2.20-8
1.2.20-8+deb12u1~deb11u11.2.20-8+deb12u1
Openatom Openeuler=20.03-sp1
Openatom Openeuler=20.03-sp3
Openatom Openeuler=22.03
Event History
Aug 9, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Aug 25, 2022
Data Sourced
via Red Hat·05:13 AM
DescriptionSeverityAffected Software
Mar 31, 2025
Data Sourced
via Ubuntu·07:13 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·07:14 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-33645?
CVE-2021-33645 is classified as a medium-severity vulnerability due to the potential for memory leaks.
2
How do I fix CVE-2021-33645?
To fix CVE-2021-33645, update the affected software to a version that includes the patch for the memory leak.
3
Which software is affected by CVE-2021-33645?
CVE-2021-33645 affects multiple versions of libtar prior to 1.2.21 and specific versions of Huawei openEuler and Fedora.
4
What impact does CVE-2021-33645 have on the system?
CVE-2021-33645 can cause memory leaks, potentially leading to degraded system performance or crashes over time.
5
Is CVE-2021-33645 a zero-day vulnerability?
CVE-2021-33645 was not reported as a zero-day vulnerability but poses a risk if not patched in affected software.