Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bsdtarUpgrade libarchive-develUpgrade libarchive | Sep 9, 2022 | Mar 28, 2022 |
| Alpine Linux | — | Upgrade libarchive | Aug 22, 2024 | Mar 28, 2022 |
| Amazon_linux_2023 | — | Upgrade bsdtarUpgrade bsdcatUpgrade libarchive-debugsourceUpgrade bsdtar-debuginfoUpgrade libarchive-develUpgrade libarchiveUpgrade bsdcpioUpgrade bsdcat-debuginfoUpgrade bsdcpio-debuginfoUpgrade libarchive-debuginfo | Feb 17, 2025 | Mar 29, 2022 |
| Centos_linux | — | Upgrade libarchive-debugsourceUpgrade libarchive-debuginfoUpgrade bsdtar-debuginfoUpgrade bsdcat-debuginfoUpgrade bsdcpio-debuginfoUpgrade libarchiveUpgrade bsdtar | Jul 5, 2022 | Mar 28, 2022 |
| Debian | — | Upgrade libarchive | Jul 30, 2024 | Mar 28, 2022 |
| Gentoo Linux | — | Upgrade app-arch/libarchive. | Aug 16, 2022 | Mar 28, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libarchive | Oct 11, 2022 | Mar 28, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libarchive | Sep 14, 2022 | Mar 28, 2022 |
| Oracle_linux | — | Upgrade bsdtarUpgrade libarchive-develUpgrade libarchive | Jul 22, 2024 | Mar 29, 2022 |
| Redhat_linux | — | Upgrade bsdcpio-debuginfoUpgrade bsdcat-debuginfoUpgrade libarchive-debuginfoUpgrade libarchive-develUpgrade libarchive-debugsourceUpgrade bsdtar-debuginfoUpgrade libarchiveUpgrade bsdtar | Jul 5, 2022 | Mar 28, 2022 |
| Rocky_linux | — | Upgrade libarchive-debugsourceUpgrade bsdtarUpgrade libarchiveUpgrade libarchive-debuginfoUpgrade bsdtar-debuginfoUpgrade libarchive-devel | Mar 12, 2024 | Mar 28, 2022 |
| Suse | — | Upgrade libarchive13Upgrade libarchive-develUpgrade bsdtarUpgrade libarchive13-32bit | Oct 26, 2022 | Mar 28, 2022 |
| Ubuntu | — | Upgrade libarchive13 | Apr 12, 2022 | Mar 28, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub