Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2021-0233 Critical: Tar Memory Consumption Threat

mageia
Calendar Grey June 8, 2021
Dist Mageia Esm H88
A significant vulnerability in tar versions 1.33 and prior poses a memory usage problem impacting Mageia 7 and 8. Please update immediately to ensure your system's security.
A flaw was found in the src/list.c of tar 1.33 and earlier

Summary

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability (CVE-2021-20193).

References

- https://bugs.mageia.org/show_bug.cgi?id=29049

-

- https://www.cve.org/CVERecord?id=CVE-2021-20193

Topics%20covered

Topics Covered

security advisory security issue tar package memory consumption Mageia system availability updated tar

Resolution

SRPMS

- 7/core/tar-1.32-1.1.mga7

- 8/core/tar-1.33-2.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 08 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0233.html
Type: security
CVE: CVE-2021-20193

Topics%20covered

Topics Covered

security advisory security issue tar package memory consumption Mageia system availability updated tar

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here