Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7376-x4rm-3v8x

Опубликовано: 09 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

EPSS

Процентиль: 11%
0.00039
Низкий

3.9 Low

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 3.9
ubuntu
около 2 месяцев назад

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

CVSS3: 3.9
redhat
3 месяца назад

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

CVSS3: 3.9
nvd
около 2 месяцев назад

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

CVSS3: 3.9
debian
около 2 месяцев назад

A vulnerability has been identified in the libarchive library, specifi ...

suse-cvrf
13 дней назад

Security update for libarchive

EPSS

Процентиль: 11%
0.00039
Низкий

3.9 Low

CVSS3

Дефекты

CWE-415