Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7376-x4rm-3v8x

Опубликовано: 09 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

EPSS

Процентиль: 1%
0.00013
Низкий

3.9 Low

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 3.9
ubuntu
9 дней назад

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

CVSS3: 3.9
redhat
30 дней назад

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

CVSS3: 3.9
nvd
9 дней назад

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

CVSS3: 3.9
debian
9 дней назад

A vulnerability has been identified in the libarchive library, specifi ...

EPSS

Процентиль: 1%
0.00013
Низкий

3.9 Low

CVSS3

Дефекты

CWE-415