archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libarchive | Nov 27, 2019 | Oct 24, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bsdcpioamazon-linux-ami-2-upgrade-bsdtaramazon-linux-ami-2-upgrade-libarchiveamazon-linux-ami-2-upgrade-libarchive-debuginfoamazon-linux-ami-2-upgrade-libarchive-devel | Apr 27, 2020 | Oct 24, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-libarchive | Mar 2, 2020 | Oct 24, 2019 |
| Centos_linux | — | centos-upgrade-bsdcat-debuginfocentos-upgrade-bsdcpiocentos-upgrade-bsdcpio-debuginfocentos-upgrade-bsdtarcentos-upgrade-bsdtar-debuginfocentos-upgrade-libarchivecentos-upgrade-libarchive-debuginfocentos-upgrade-libarchive-debugsourcecentos-upgrade-libarchive-devel | Jan 31, 2020 | Oct 24, 2019 |
| Debian | debian-upgrade-libarchive | Oct 28, 2019 | Oct 24, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-app-arch-libarchive | Mar 16, 2020 | Oct 24, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libarchive | Dec 4, 2019 | Oct 24, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libarchive | Dec 18, 2019 | Oct 24, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libarchive | Dec 11, 2019 | Oct 24, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bsdtarhuawei-euleros-2_0_sp8-upgrade-libarchivehuawei-euleros-2_0_sp8-upgrade-libarchive-devel | Jan 3, 2020 | Oct 24, 2019 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-libarchive-3-4-0-0-175-3-36-0-18-0oracle-solaris-11-4-upgrade-library-libarchive-3-4-0-11-4-15-0-1-3-0 | Nov 20, 2019 | Oct 24, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-bsdcpiooracle-linux-upgrade-bsdtaroracle-linux-upgrade-libarchiveoracle-linux-upgrade-libarchive-devel | Jan 23, 2020 | May 10, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Oct 24, 2019 | |
| Redhat_linux | redhat-upgrade-bsdcat-debuginforedhat-upgrade-bsdcpioredhat-upgrade-bsdcpio-debuginforedhat-upgrade-bsdtarredhat-upgrade-bsdtar-debuginforedhat-upgrade-libarchiveredhat-upgrade-libarchive-debuginforedhat-upgrade-libarchive-debugsourceredhat-upgrade-libarchive-devel | Jan 31, 2020 | Oct 24, 2019 | |
| Suse | — | suse-upgrade-bsdtarsuse-upgrade-libarchive-develsuse-upgrade-libarchive13suse-upgrade-libarchive13-32bit | Nov 29, 2019 | Oct 24, 2019 |
| Ubuntu | ubuntu-pro-upgrade-libarchive13ubuntu-upgrade-libarchive13 | Oct 30, 2019 | Oct 24, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub