CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.2. See the original NVD description below for full technical details.
CVE
CVE-2021-33640
Severity
MEDIUM
CVSS
6.2
EPSS
0.65%
Original NVD Description
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).
Related CVEs
Other vulnerabilities affecting the same vendor(s)