The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0067 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-33643:
    An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.

    CVE-2021-33644:
    An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.

    CVE-2021-33645:
    The th_read() function doesnt free a variable t->th_buf.gnu_longlink after allocating memory, which may     cause a memory leak.

    CVE-2021-33646:
    The th_read() function doesnt free a variable t->th_buf.gnu_longname after allocating memory, which may     cause a memory leak.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:2898 advisory.

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read. (CVE-2021-33643)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read. (CVE-2021-33644)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longlink after allocating memory, which may     cause a memory leak. (CVE-2021-33645)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longname after allocating memory, which may     cause a memory leak. (CVE-2021-33646)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2898 advisory.

    - fix use-after-free bugs introduced by incorrect memleak fixes (CVE-2021-33640)
    - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read. (CVE-2021-33643)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read. (CVE-2021-33644)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longlink after allocating memory, which may     cause a memory leak. (CVE-2021-33645)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longname after allocating memory, which may     cause a memory leak. (CVE-2021-33646)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libtar package has been released.

According to the versions of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in     the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the     released memory is used (use-after-free). (CVE-2021-33640)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read. (CVE-2021-33643)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read. (CVE-2021-33644)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longlink after allocating memory, which may     cause a memory leak. (CVE-2021-33645)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longname after allocating memory, which may     cause a memory leak. (CVE-2021-33646)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
236098	Alibaba Cloud Linux 3 : 0067: libtar (ALINUX3-SA-2023:0067)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
175845	CentOS 8 : libtar (CESA-2023:2898)	Nessus	CentOS Local Security Checks	2023/5/16	2023/5/16	critical
176281	Oracle Linux 8 : libtar (ELSA-2023-2898)	Nessus	Oracle Linux Local Security Checks	2023/5/24	2024/10/22	critical
166978	EulerOS 2.0 SP5 : libtar (EulerOS-SA-2022-2713)	Nessus	Huawei Local Security Checks	2022/11/4	2022/11/28	critical
333880	Photon OS 5.0: Libtar PHSA-2023-5.0-92-0010	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	critical
171144	EulerOS 2.0 SP8 : libtar (EulerOS-SA-2023-1324)	Nessus	Huawei Local Security Checks	2023/2/8	2023/2/8	critical
204073	Photon OS 3.0: Libtar PHSA-2022-3.0-0437	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical