archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libarchive | Nov 27, 2019 | Oct 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libarchive-develUpgrade libarchiveUpgrade bsdcpioUpgrade libarchive-debuginfoUpgrade bsdtar | Apr 27, 2020 | Oct 24, 2019 |
| Amazon_linux | — | Upgrade libarchive | Mar 2, 2020 | Oct 24, 2019 |
| Centos_linux | — | Upgrade bsdcpioUpgrade bsdcat-debuginfoUpgrade libarchive-debuginfoUpgrade bsdcpio-debuginfoUpgrade bsdtar-debuginfoUpgrade libarchive-debugsourceUpgrade bsdtarUpgrade libarchiveUpgrade libarchive-devel | Jan 31, 2020 | Oct 24, 2019 |
| Debian | — | Upgrade libarchive | Oct 28, 2019 | Oct 24, 2019 |
| Gentoo Linux | — | Upgrade app-arch/libarchive. | Mar 16, 2020 | Oct 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libarchive | Dec 4, 2019 | Oct 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libarchive | Dec 18, 2019 | Oct 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libarchive | Dec 11, 2019 | Oct 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bsdtarUpgrade libarchiveUpgrade libarchive-devel | Jan 3, 2020 | Oct 24, 2019 |
| Oracle Solaris | — | Upgrade library/libarchive to version 3.4.0-0.175.3.36.0.18.0 on Solaris 11.3Upgrade library/libarchive to version 3.4.0-11.4.15.0.1.3.0 on Solaris 11.4 | Nov 20, 2019 | Oct 24, 2019 |
| Oracle_linux | — | Upgrade libarchive-develUpgrade bsdtarUpgrade libarchiveUpgrade bsdcpio | Jan 23, 2020 | May 10, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 24, 2019 |
| Redhat_linux | — | Upgrade bsdcpioUpgrade bsdcat-debuginfoUpgrade bsdcpio-debuginfoUpgrade bsdtarUpgrade libarchiveUpgrade bsdtar-debuginfoUpgrade libarchive-debugsourceUpgrade libarchive-debuginfoUpgrade libarchive-devel | Jan 31, 2020 | Oct 24, 2019 |
| Suse | — | Upgrade libarchive13-32bitUpgrade libarchive13Upgrade bsdtarUpgrade libarchive-devel | Nov 29, 2019 | Oct 24, 2019 |
| Ubuntu | — | Upgrade libarchive13Upgrade libarchive13 (Ubuntu Pro) | Oct 30, 2019 | Oct 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub