archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libarchive | Mar 26, 2024 | Feb 20, 2020 |
| Debian | — | Upgrade libarchive | Jul 30, 2024 | Feb 20, 2020 |
| Gentoo Linux | — | Upgrade app-arch/libarchive. | Mar 16, 2020 | Feb 20, 2020 |
| Oracle Solaris | — | Upgrade library/libarchive to version 3.4.2-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Feb 20, 2020 |
| Ubuntu | — | Upgrade libarchive13 | Mar 3, 2020 | Feb 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub