CVE:CVE-2021-33643
CNNVD:CNNVD-202208-2780
openEuler是开放原子开源基金会的一款操作系统。
开放原子开源基金会 openEuler 20.03-LTS-SP1，20.03-LTS-SP3和22.03-LTS版本存在安全漏洞，该漏洞源于攻击者如果提交一个头结构中大小为0的特制tar文件，可能会触发对变量gnu_longlink的malloc(0)调用，从而导致越界读取。
solution:Upgrade feep libtar to a higher version than 1.2.21,and avoid the version (,1.2.21); Upgrade huawei openeuler to a higher version than 20.03:sp1,20.03:sp3,22.03,and avoid the version 20.03:sp1,20.03:sp3,22.03; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37