vulnerability

F5: CVE-2018-1000880: K000148256: libarchive vulnerability CVE-2018-1000880

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Oct 26, 2024

Added

Jun 17, 2026

Modified

Jun 17, 2026

Description

libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a specially crafted WARC file.

Solution

f5-bigip-upgrade-latest

References

CVE-2018-100088
https://attackerkb.com/topics/CVE-2018-100088
https://my.f5.com/manage/s/article/K000148256
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2057
CWE-119
EUVD-EUVD-2018-2057

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report