Total vulnerabilities in the database
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free).
| Software | From | Fixed in |
|---|---|---|
| fedoraproject / fedora | 36 | 36.x |
| fedoraproject / fedora | 37 | 37.x |
| openatom / openeuler | 20.03-sp1 | 20.03-sp1.x |
| openatom / openeuler | 20.03-sp2 | 20.03-sp2.x |
| openatom / openeuler | 22.03 | 22.03.x |