Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libarchive-develUpgrade bsdtarUpgrade libarchive | Sep 9, 2022 | Mar 28, 2022 |
| Alpine Linux | — | Upgrade libarchive | Aug 22, 2024 | Mar 28, 2022 |
| Amazon_linux_2023 | — | Upgrade bsdcpioUpgrade libarchive-debuginfoUpgrade bsdcpio-debuginfoUpgrade libarchiveUpgrade bsdcat-debuginfoUpgrade bsdcatUpgrade libarchive-develUpgrade bsdtar-debuginfoUpgrade bsdtarUpgrade libarchive-debugsource | Feb 17, 2025 | Mar 29, 2022 |
| Centos_linux | — | Upgrade bsdcpio-debuginfoUpgrade libarchiveUpgrade bsdtarUpgrade bsdcat-debuginfoUpgrade bsdtar-debuginfoUpgrade libarchive-debugsourceUpgrade libarchive-debuginfo | Jul 5, 2022 | Mar 28, 2022 |
| Debian | — | Upgrade libarchive | Jul 30, 2024 | Mar 28, 2022 |
| Gentoo Linux | — | Upgrade app-arch/libarchive. | Aug 16, 2022 | Mar 28, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libarchive | Oct 11, 2022 | Mar 28, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libarchive | Sep 14, 2022 | Mar 28, 2022 |
| Oracle_linux | — | Upgrade libarchiveUpgrade libarchive-develUpgrade bsdtar | Jul 22, 2024 | Mar 29, 2022 |
| Redhat_linux | — | Upgrade libarchive-debuginfoUpgrade bsdcat-debuginfoUpgrade bsdcpio-debuginfoUpgrade bsdtarUpgrade bsdtar-debuginfoUpgrade libarchive-develUpgrade libarchiveUpgrade libarchive-debugsource | Jul 5, 2022 | Mar 28, 2022 |
| Rocky_linux | — | Upgrade libarchive-debugsourceUpgrade bsdtarUpgrade libarchive-debuginfoUpgrade libarchive-develUpgrade libarchiveUpgrade bsdtar-debuginfo | Mar 12, 2024 | Mar 28, 2022 |
| Suse | — | Upgrade libarchive13-32bitUpgrade bsdtarUpgrade libarchive-develUpgrade libarchive13 | Oct 26, 2022 | Mar 28, 2022 |
| Ubuntu | — | Upgrade libarchive13 | Apr 12, 2022 | Mar 28, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub