Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5601

Опубликовано: 27 янв. 2017
Источник: redhat
CVSS3: 4.8
EPSS Низкий

Описание

An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

Отчет

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libarchiveNot affected
Red Hat Enterprise Linux 7libarchiveWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-20->CWE-190->CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1417912libarchive: Out of bounds read in lha_read_file_header_1() function

EPSS

Процентиль: 71%
0.00686
Низкий

4.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 9 лет назад

An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

CVSS3: 7.5
nvd
около 9 лет назад

An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

CVSS3: 7.5
debian
около 9 лет назад

An error in the lha_read_file_header_1() function (archive_read_suppor ...

CVSS3: 7.5
github
больше 3 лет назад

An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

suse-cvrf
почти 4 года назад

Security update for libarchive

EPSS

Процентиль: 71%
0.00686
Низкий

4.8 Medium

CVSS3