CVE-2021-20193

State: Published
Severity: Not scored
Published: Mar 26, 2021
Updated: Oct 14, 2026
Reserved: Dec 17, 2020

Description

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

Scores

The record has no CVSS score.

Weaknesses

CWE-401 >CWE-125

Affected Products

Product	Versions
tarn/a	1.33 and earlierAffected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1917565
https://savannah.gnu.org/bugs/?59897
https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777
GLSA-202105-29vendor-advisory
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.