huawei openeuler 20.03 vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).

Huawei Openeuler 20.03 Huawei Openeuler 22.03 Fedoraproject Fedora 36 Fedoraproject Fedora 37

9.1

CVSSv3

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.

Feep Libtar Huawei Openeuler 20.03 Huawei Openeuler 22.03 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

8.1

CVSSv3

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.

Feep Libtar Huawei Openeuler 20.03 Huawei Openeuler 22.03 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

7.5

CVSSv3

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.

Feep Libtar Huawei Openeuler 20.03 Huawei Openeuler 22.03 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

7.5

CVSSv3

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

Feep Libtar Huawei Openeuler 20.03 Huawei Openeuler 22.03 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

6.8

CVSSv3

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

Huawei Openeuler 20.03 Linux Linux Kernel Debian Debian Linux 10.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook