Read the docs

Openatom

Records165All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high63CVSS 7.0–8.9

Exploited now

Openatom records in CISA KEV

No Openatom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openharmony 156 records MEDIUM Openeuler 8 records MEDIUM Openeuler Kernel 1 record LOW

Records

8 records in Openeuler · all components

TI-2021-13017 CVE-2021-33643 · GHSA-j7g9-fcw9-wxcf

Out-of-bounds read in libtar

Priority MEDIUM 49

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01876 Published 2022-08-09 Partial fix · 1.2.21 CWE-125
TI-2021-13014 CVE-2021-33640 · GHSA-pjrv-5vw3-5frj

Use after free in openEuler 22.03 LTS

Priority MEDIUM 43

After tar_close(), libtar.c releases the memory pointed to by pointer t.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00695 Published 2022-12-19 Will not fix CWE-416
TI-2021-13018 CVE-2021-33644 · GHSA-f326-p7mm-52h2

Out-of-bounds read in libtar

Priority LOW 38

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01576 Published 2022-08-09 Partial fix · 1.2.21 CWE-125
TI-2021-13020 CVE-2021-33646 · GHSA-x27v-rjqh-f4xc

Memory leak in libtar

Priority LOW 37

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01999 Published 2022-08-09 Partial fix · 1.2.21 CWE-401
TI-2021-13019 CVE-2021-33645 · GHSA-j8q5-rwmr-9hg8

Memory leak in libtar

Priority LOW 37

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02016 Published 2022-08-09 Partial fix · 1.2.21 CWE-401
TI-2021-13005 CVE-2021-33631 · GHSA-ff22-5jp8-224r

Kernel crash in EXT4 filesystem

Priority LOW 34

Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 b…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00371 Published 2024-01-18 Partial fix CWE-190
TI-2021-13004 CVE-2021-33630 · GHSA-4mwf-4888-4x35

NULL-ptr-deref in network sched

Priority LOW 25

NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00341 Published 2024-01-18 Partial fix CWE-476
Open these records in search →