Huawei openEuler 22.03 LTS Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:huawei:openeuler:22.03:*:*:*:lts:*:*:*

part: o version: 22.03 update: *

VendorHuawei (1cc7ae8f-602e-5c48-b475-b8c42c69e952)
ProductOpeneuler (ba90f601-dbb9-5ae2-bb31-3babedfbf39c)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33646 vulnerable 2026-06-08 05:32:11.984692 Details available
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.
Published: 2022-08-09T00:00:00.000Z
Updated: 2025-11-03T20:33:40.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33645 vulnerable 2026-06-08 05:32:11.984180 Details available
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.
Published: 2022-08-09T00:00:00.000Z
Updated: 2025-11-03T20:33:38.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33644 vulnerable 2026-06-08 05:32:11.983623 Details available
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.
Published: 2022-08-09T00:00:00.000Z
Updated: 2025-11-03T20:33:37.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33643 vulnerable 2026-06-08 05:32:11.981495 Details available
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.
Published: 2022-08-09T00:00:00.000Z
Updated: 2026-06-23T14:42:04.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33640 vulnerable 2026-06-08 05:32:11.973378 Details available
MEDIUM (6.2)
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).
Published: 2022-12-19T00:00:00.000Z
Updated: 2025-04-17T14:58:03.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.