Description

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Related CPE's

a

libarchive

libarchive

Vulnerable

o

fedoraproject

fedora

35

Vulnerable

o

apple

ipados

Vulnerable

o

apple

iphone_os

Vulnerable

o

apple

macos

Vulnerable

o

apple

watchos

Vulnerable

a

splunk

universal_forwarder

3

References

http://seclists.org/fulldisclosure/2022/Mar/27

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Mar/28

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Mar/29

Mailing ListThird Party Advisory

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375

Issue TrackingThird Party Advisory

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libarchive/OSV-2021-557.yaml

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SE5NJQNM22ZE5Z55LPAGCUHSBQZBKMKC/

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202208-26

Third Party Advisory

https://support.apple.com/kb/HT213182

Third Party Advisory

https://support.apple.com/kb/HT213183

Third Party Advisory

https://support.apple.com/kb/HT213193

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-416

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.5 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-07-20T07:15:07.950

3 years ago

Last modified

2024-03-27T16:04:33.757

1 year ago