Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bsdtaralma-upgrade-libarchivealma-upgrade-libarchive-devel | Sep 9, 2022 | Mar 28, 2022 | |
| Alpine Linux | alpine-linux-upgrade-libarchive | Aug 22, 2024 | Mar 28, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bsdcatamazon-linux-2023-upgrade-bsdcat-debuginfoamazon-linux-2023-upgrade-bsdcpioamazon-linux-2023-upgrade-bsdcpio-debuginfoamazon-linux-2023-upgrade-bsdtaramazon-linux-2023-upgrade-bsdtar-debuginfoamazon-linux-2023-upgrade-libarchiveamazon-linux-2023-upgrade-libarchive-debuginfoamazon-linux-2023-upgrade-libarchive-debugsourceamazon-linux-2023-upgrade-libarchive-devel | Feb 17, 2025 | Mar 29, 2022 | |
| Centos_linux | — | centos-upgrade-bsdcat-debuginfocentos-upgrade-bsdcpio-debuginfocentos-upgrade-bsdtarcentos-upgrade-bsdtar-debuginfocentos-upgrade-libarchivecentos-upgrade-libarchive-debuginfocentos-upgrade-libarchive-debugsource | Jul 5, 2022 | Mar 28, 2022 |
| Debian | debian-upgrade-libarchive | Jul 30, 2024 | Mar 28, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-app-arch-libarchive | Aug 16, 2022 | Mar 28, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libarchive | Oct 11, 2022 | Mar 28, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libarchive | Sep 14, 2022 | Mar 28, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-bsdtaroracle-linux-upgrade-libarchiveoracle-linux-upgrade-libarchive-devel | Jul 22, 2024 | Mar 29, 2022 |
| Redhat_linux | redhat-upgrade-bsdcat-debuginforedhat-upgrade-bsdcpio-debuginforedhat-upgrade-bsdtarredhat-upgrade-bsdtar-debuginforedhat-upgrade-libarchiveredhat-upgrade-libarchive-debuginforedhat-upgrade-libarchive-debugsourceredhat-upgrade-libarchive-devel | Jul 5, 2022 | Mar 28, 2022 | |
| Rocky_linux | rocky-upgrade-bsdtarrocky-upgrade-bsdtar-debuginforocky-upgrade-libarchiverocky-upgrade-libarchive-debuginforocky-upgrade-libarchive-debugsourcerocky-upgrade-libarchive-devel | Mar 12, 2024 | Mar 28, 2022 | |
| Suse | — | suse-upgrade-bsdtarsuse-upgrade-libarchive-develsuse-upgrade-libarchive13suse-upgrade-libarchive13-32bit | Oct 26, 2022 | Mar 28, 2022 |
| Ubuntu | ubuntu-upgrade-libarchive13 | Apr 12, 2022 | Mar 28, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub