openeuler vulnerabilities
CVEs whose affected-version data names the openeuler package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2021-33643Critical· 9.1An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.
▾ Midnightfeep · libtarEPSS 1.9%via NVD
CVE-2021-33656Medium· 6.8When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
▾ Sunlitopenatom · openeulerEPSS 0.61%via NVD