Описание
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.2.2-3.1ubuntu0.3 |
| cosmic | released | 3.2.2-5ubuntu0.2 |
| devel | released | 3.3.3-4 |
| esm-infra-legacy/trusty | released | 3.1.2-7ubuntu2.8 |
| esm-infra-legacy/xenial | released | 3.1.2-11ubuntu0.16.04.6 |
| esm-infra/bionic | released | 3.2.2-3.1ubuntu0.3 |
| esm-infra/xenial | released | 3.1.2-11ubuntu0.16.04.6 |
| precise/esm | DNE | |
| trusty | released | 3.1.2-7ubuntu2.8 |
| trusty/esm | released | 3.1.2-7ubuntu2.8 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onw ...
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
Уязвимость библиотеки libarchive, связанная с чтением за границами буфера памяти, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3