ZeroDay Findings
Sign inSign up

Findings

CVE-2021-20193

A flaw was found in the src/list.c of tar 1.33 and earlier.

Published Mar 26, 2021 · updated Oct 14, 2026 · gnu tar

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 26, 2021 · NIST NVD

    Detected

    A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

Affected

  • cpe gnu/tarversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2021-20193

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-20193

    30-day exploitation probability 1.1%

    first.org
  • NIST NVDVulnerability recordCVE-2021-20193

    A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

    nvd.nist.gov

References