Описание
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.2.2-3.1ubuntu0.6 |
| devel | released | 3.4.0-1ubuntu2 |
| disco | ignored | end of life |
| eoan | released | 3.4.0-1ubuntu0.1 |
| esm-infra-legacy/trusty | released | 3.1.2-7ubuntu2.8+esm4 |
| esm-infra-legacy/xenial | released | 3.1.2-11ubuntu0.16.04.8 |
| esm-infra/bionic | released | 3.2.2-3.1ubuntu0.6 |
| esm-infra/focal | released | 3.4.0-1ubuntu2 |
| esm-infra/xenial | released | 3.1.2-11ubuntu0.16.04.8 |
| focal | released | 3.4.0-1ubuntu2 |
Показывать по
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string ...
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3