The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libarchive-develUpgrade libarchiveUpgrade bsdtar | May 15, 2023 | Nov 22, 2022 |
| Alpine Linux | — | Upgrade libarchive | Mar 26, 2024 | Nov 22, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bsdtarUpgrade bsdcpioUpgrade libarchive-debuginfoUpgrade libarchiveUpgrade libarchive-devel | Oct 6, 2023 | Nov 22, 2022 |
| Amazon_linux_2023 | — | Upgrade libarchiveUpgrade bsdcpio-debuginfoUpgrade bsdtarUpgrade bsdcpioUpgrade bsdtar-debuginfoUpgrade libarchive-debuginfoUpgrade bsdcatUpgrade libarchive-debugsourceUpgrade bsdcat-debuginfoUpgrade libarchive-devel | Feb 17, 2025 | Jul 11, 2022 |
| Centos_linux | — | Upgrade bsdcat-debuginfoUpgrade libarchive-debuginfoUpgrade libarchive-debugsourceUpgrade bsdcpio-debuginfoUpgrade bsdtarUpgrade libarchiveUpgrade bsdtar-debuginfo | May 15, 2023 | Nov 22, 2022 |
| Debian | — | Upgrade libarchive | Feb 1, 2023 | Nov 22, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 6, 2024 |
| Gentoo Linux | — | Upgrade app-arch/libarchive. | Oct 2, 2023 | Nov 22, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libarchive | Feb 13, 2023 | Nov 22, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libarchive | Mar 8, 2023 | Nov 22, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libarchive | Jun 9, 2023 | Nov 22, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bsdtarUpgrade libarchiveUpgrade libarchive-devel | Feb 9, 2023 | Nov 22, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libarchive | Mar 9, 2023 | Nov 22, 2022 |
| Oracle_linux | — | Upgrade libarchive-develUpgrade libarchiveUpgrade bsdtar | May 17, 2023 | Jul 11, 2022 |
| Redhat_linux | — | Upgrade bsdcpio-debuginfoUpgrade bsdcat-debuginfoUpgrade bsdtarUpgrade libarchive-develUpgrade libarchive-debugsourceUpgrade bsdtar-debuginfoUpgrade libarchive-debuginfoNo solution existsUpgrade libarchive | May 15, 2023 | Nov 22, 2022 |
| Rocky_linux | — | Upgrade libarchive-debugsourceUpgrade libarchive-debuginfoUpgrade libarchive-develUpgrade bsdtarUpgrade bsdtar-debuginfoUpgrade libarchive | Mar 23, 2026 | Mar 20, 2026 |
| Splunk | — | Upgrade Splunk Universal Forwarder to version 9.0.6Upgrade Splunk Universal Forwarder to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Universal Forwarder to version 9.0.5Upgrade Splunk Universal Forwarder to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Universal Forwarder to version 8.2.12Upgrade Splunk Universal Forwarder to version 8.2.11 | Sep 30, 2025 | Nov 22, 2022 |
| Suse | — | Upgrade libarchive13Upgrade bsdtarUpgrade libarchive13-32bitUpgrade libarchive-devel | Nov 24, 2022 | Nov 22, 2022 |
| Ubuntu | — | Upgrade libarchive13 (Ubuntu Pro)Upgrade libarchive13t64Upgrade libarchive13 | Oct 17, 2024 | Nov 22, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub