This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Libarchive fixes 4 high-severity vulnerabilities
The libarchive library version 3.7.5 fixes 4 high-severity vulnerabilities [1]. In addition, the latest version 3.7.7 is also available [2].
An authenticated local attacker can achieve remote code execution [3][4].
The vulnerability is present in product:
- libarchive; <3.7.5
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2024-20696 at cve.org, NVD
- CWE-122: Heap-based Buffer Overflow at cwe.mitre.org
The vulnerability was publicly disclosed 9. 1. 2024.
An unauthenticated local attacker can achieve remote code execution through a heap-based buffer overflow vulnerability [5][6].
The vulnerability is present in product:
- libarchive; <3.7.5
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2024-26256 at cve.org, NVD
- CWE-122: Heap-based Buffer Overflow at cwe.mitre.org
The vulnerability was publicly disclosed 9. 4. 2024.
An unauthenticated local attacker can gain unauthorized access to memory through an out-of-bounds vulnerability in the function execute_filter_audio in the file archive_read_support_format_rar.c [7][8][9].
The vulnerability is present in product:
- libarchive; <3.7.5
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2024-48957 at cve.org, NVD
- CWE-125: Out-of-bounds Read at cwe.mitre.org
The vulnerability was publicly disclosed 9. 10. 2024.
An unauthenticated local attacker can gain unauthorized access to memory through an out-of-bounds vulnerability in the function execute_filter_delta in the file archive_read_support_format_rar.c [10][11][12].
The vulnerability is present in product:
- libarchive; <3.7.5
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2024-48958 at cve.org, NVD
- CWE-125: Out-of-bounds Read at cwe.mitre.org
The vulnerability was publicly disclosed 9. 10. 2024.
Links
- [1] https://github.com/libarchive/libarchive/releases/tag/v3.7.5
- [2] https://github.com/libarchive/libarchive/releases/tag/v3.7.7
- [3] https://github.com/advisories/GHSA-g5xc-jv8h-2232
- [4] https://vuldb.com/?id.250171
- [5] https://github.com/advisories/GHSA-2jc9-36w4-pmqw
- [6] https://vuldb.com/?id.260003
- [7] https://nvd.nist.gov/vuln/detail/CVE-2024-48957
- [8] https://vuldb.com/?id.279931
- [9] https://github.com/libarchive/libarchive/pull/2149
- [10] https://nvd.nist.gov/vuln/detail/CVE-2024-48958
- [11] https://vuldb.com/?id.279932
- [12] https://github.com/libarchive/libarchive/pull/2148
By CESNET, z.s.p.o. Michaela Ručková on 14. 10. 2024.