{"id":"CVE-2021-33640","aliases":["AZL-12933","AZL-34950","EUVD-2021-20317","GHSA-pjrv-5vw3-5frj","MGASA-2022-0488","OESA-2022-2129","OESA-2023-1008","openSUSE-SU-2026:11092-1"],"status":"published","title":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is...","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released memory is used (use-after-free).","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00695,"percentile":0.53451,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-12-09T11:05:26Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libtar","fixed_in":["1.2.20-11"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libtar","fixed_in":["1.2.20-11"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libtar","fixed_in":["1.2.20-9.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libtar","fixed_in":["1.2.20-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libtar","fixed_in":["1.2.20-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libtar","fixed_in":["1.2.20-22.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libtar","fixed_in":["1.2.20-22.oe2203sp1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-11"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-11"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-9.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-22.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-22.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.20-3.1"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"openatom","product":"openeuler"},{"vendor":"openeuler","product":"openeuler 20.03 lts sp1"},{"vendor":"openeuler","product":"openeuler 20.03 lts sp3"},{"vendor":"openeuler","product":"openeuler 22.03 lts"}],"references":[{"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2021-33640\u0026packageName=libtar","tags":["x_transferred","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC/","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T/","tags":["vendor-advisory","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33640","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T"},{"url":"https://github.com/advisories/GHSA-pjrv-5vw3-5frj"},{"url":"https://advisories.mageia.org/MGASA-2022-0488.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31337","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2129","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1008","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33645","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-33640","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released memory is used (use-after-free).","status":"published","published":"2022-12-19T00:00:00Z","modified":"2025-04-17T14:58:03.494Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-20317","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released memory is used (use-after-free).","status":"published","published":"2022-12-19T00:00:00Z","modified":"2025-04-17T14:58:03Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:21.593744Z"}],"ghsa":[{"id":"GHSA-pjrv-5vw3-5frj","title":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is...","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released memory is used (use-after-free).","status":"published","published":"2022-12-19T18:30:25Z","modified":"2025-04-02T21:31:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:00:36.60124Z"}],"nvd":[{"id":"CVE-2021-33640","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released memory is used (use-after-free).","status":"published","published":"2022-12-19T16:15:10.84Z","modified":"2026-06-17T03:54:55.21Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:07.323379Z"}],"osv":[{"id":"AZL-12933","title":"CVE-2021-33640 affecting package libtar for versions less than 1.2.20-11","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released memory is used (use-after-free).","status":"published","published":"2022-12-19T16:15:10Z","modified":"2026-04-21T04:22:27.366878Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"AZL-34950","title":"CVE-2021-33640 affecting package libtar for versions less than 1.2.20-11","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released memory is used (use-after-free).","status":"published","published":"2022-12-19T16:15:10Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"OESA-2022-2129","title":"libtar security update","description":"Libtar is a C library for manipulating POSIX tar files. It handles adding and extracting files to/from a tar archive. Requires gcc, make, and zlib.\r\n\r\nSecurity Fix(es):\r\n\r\nNo description is available for this CVE.(CVE-2021-33640)","status":"published","published":"2022-12-09T11:05:26Z","modified":"2026-08-18T01:17:26.897166062Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1008","title":"libtar security update","description":"Libtar is a C library for manipulating POSIX tar files. It handles adding and extracting files to/from a tar archive. Requires gcc, make, and zlib.\r\n\r\nSecurity Fix(es):\r\n\r\nAfter tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t-\u0026gt;th_buf) . As a result, the released memory is used (use-after-free).(CVE-2021-33640)","status":"published","published":"2023-01-06T11:05:29Z","modified":"2026-08-18T01:17:28.42857984Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"MGASA-2022-0488","title":"Updated libtar packages fix security vulnerability","description":"After tar_close(), libtar.c releases the memory pointed to by pointer t.\nAfter tar_close() is called in the list() function, it continues to use\npointer t: free_longlink_longname(t-\u003eth_buf) . As a result, the released\nmemory is used (use-after-free). (CVE-2021-33640)\n","status":"published","published":"2022-12-30T22:39:00Z","modified":"2026-04-16T04:43:54.333011711Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2026:11092-1","title":"libtar-1.2.20-3.1 on GA media","description":"These are all security issues fixed in the libtar-1.2.20-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-06-24T09:00:22.381444573Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}