CVE-2021-33645

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.

Score

CVSS 3.1 7.5 High

Status

Modified - securities@openeuler.org

Published

2022-08-10

Last modified

2025-11-03

Weaknesses

CWE-401

Affected products

• Fedora (Fedoraproject)
• Libtar (Feep)
• Openeuler (Openatom)

References

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOB…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5YSHZY753R7XW6CIKJVAWI…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7Q26QDNOJDOFYWMJWEIK5X…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFD…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD4HEBSTI22FNYKOKK7W3X…
• https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1807
• https://lists.debian.org/debian-lts-announce/2025/01/msg00026.html