libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libarchive | Mar 26, 2024 | Jul 20, 2021 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bsdcatamazon-linux-2023-upgrade-bsdcat-debuginfoamazon-linux-2023-upgrade-bsdcpioamazon-linux-2023-upgrade-bsdcpio-debuginfoamazon-linux-2023-upgrade-bsdtaramazon-linux-2023-upgrade-bsdtar-debuginfoamazon-linux-2023-upgrade-libarchiveamazon-linux-2023-upgrade-libarchive-debuginfoamazon-linux-2023-upgrade-libarchive-debugsourceamazon-linux-2023-upgrade-libarchive-devel | Feb 17, 2025 | Jun 22, 2021 | |
| Apple Osx Libarchive | apple-osx-upgrade-latest | Mar 18, 2022 | Jul 20, 2021 | |
| Debian | debian-upgrade-libarchive | Jul 30, 2024 | Jul 20, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-arch-libarchive | Aug 16, 2022 | Jul 20, 2021 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libarchive | Feb 28, 2022 | Jul 20, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libarchive | Jan 28, 2022 | Jul 20, 2021 | |
| Msft | microsoft-windows-windows_10-1809-kb5009557microsoft-windows-windows_10-1909-kb5009545microsoft-windows-windows_10-20h2-kb5009543microsoft-windows-windows_10-21h1-kb5009543microsoft-windows-windows_10-21h2-kb5009543microsoft-windows-windows_11-21h2-kb5009566microsoft-windows-windows_server_2019-1809-kb5009557microsoft-windows-windows_server_2022-21h2-kb5009555microsoft-windows-windows_server_2022-22h2-kb5009555msft-kb5009543-e6a7130f-f52b-4ae1-bd76-f4d96045c0e6 | Jan 11, 2022 | Jan 11, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Jul 20, 2021 | |
| Suse | — | suse-upgrade-bsdtarsuse-upgrade-libarchive-develsuse-upgrade-libarchive13suse-upgrade-libarchive13-32bit | Oct 26, 2022 | Jul 20, 2021 |
| Ubuntu | ubuntu-upgrade-libarchive13 | Mar 22, 2023 | Jul 20, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub