CVE-2021-20193
A flaw was found in the src/list.c of tar 1.33 and earlier.
Published Mar 26, 2021 · updated Oct 14, 2026 · gnu tar
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.
Timeline
Detection, updates, and resolution for this record.
Mar 26, 2021 · NIST NVD
Detected
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.
Affected
- cpe gnu/tarversion unspecified
Sources
- CVE.orgCVE-2021-20193
Official CVE identifier
cve.org - NIST NVDCVE-2021-20193
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.
nvd.nist.gov