Approved changes feed: RSS · Atom

cpe:2.3:o:openatom:openeuler:22.03:*:*:*:lts:*:*:*

part: o version: 22.03 update: *

VendorOpenatom (8dab3a48-246c-54aa-822c-3342b5c62878)
ProductOpeneuler (e7c15c48-44cc-5c23-be45-8a4f328c21ca)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33646 vulnerable 2026-06-08 05:32:11.984886 Details available
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
Published: 2022-08-09T00:00:00.000Z
Updated: 2025-11-03T20:33:40.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33645 vulnerable 2026-06-08 05:32:11.984284 Details available
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.
Published: 2022-08-09T00:00:00.000Z
Updated: 2025-11-03T20:33:38.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33644 vulnerable 2026-06-08 05:32:11.983734 Details available
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.
Published: 2022-08-09T00:00:00.000Z
Updated: 2025-11-03T20:33:37.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33643 vulnerable 2026-06-08 05:32:11.983014 Details available
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.
Published: 2022-08-09T00:00:00.000Z
Updated: 2026-06-23T14:42:04.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33640 vulnerable 2026-06-08 05:32:11.975999 Details available
MEDIUM (6.2)
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).
Published: 2022-12-19T00:00:00.000Z
Updated: 2025-04-17T14:58:03.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.