USN-7398-1: libtar vulnerabilities
It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2021-33643, CVE-2021-33644) It was discovered that libtar contained a memory leak due to failing to free a variable, causing performance degradation. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service. (CVE-2021-33645, CVE-2021-33646)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7398-1?
The severity of USN-7398-1 is critical due to potential out-of-bounds reads which can lead to denial of service or arbitrary code execution.
How do I fix USN-7398-1?
To fix USN-7398-1, you should upgrade the affected packages to the latest versions provided by Ubuntu for your distribution.
Which systems are affected by USN-7398-1?
USN-7398-1 affects various Ubuntu versions including 24.10, 24.04, 22.04, 20.04, 18.04, and 16.04.
What packages are impacted by USN-7398-1?
The packages impacted by USN-7398-1 include libtar-dev and libtar0.
Can USN-7398-1 lead to data breaches?
Yes, USN-7398-1 can potentially lead to data breaches if exploited, as it may allow unauthorized code execution.