Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cw9m-pj72-3cj5

Опубликовано: 24 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 3.3

Описание

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 34%
0.00136
Низкий

4.8 Medium

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-404
CWE-476

Связанные уязвимости

CVSS3: 3.3
ubuntu
6 месяцев назад

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 3.3
redhat
6 месяцев назад

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 3.3
nvd
6 месяцев назад

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 5.5
msrc
4 месяца назад

Описание отсутствует

CVSS3: 3.3
debian
6 месяцев назад

A vulnerability was found in libarchive up to 3.7.7. It has been class ...

EPSS

Процентиль: 34%
0.00136
Низкий

4.8 Medium

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-404
CWE-476