Home

CVE-2019-18408

Description

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
4.588

Associated Vulnerability

VulnerabilityOS Platform
Library to read/write archive files (USN-4169-1) libarchive13_3.3.3-4ubuntu0.1_i386.debLinux
Library to read/write archive files (USN-4169-1) libarchive13_3.3.3-4ubuntu0.1_amd64.debLinux
Library to read/write archive files (USN-4169-1) libarchive13_3.2.2-3.1ubuntu0.5_i386.debLinux
Library to read/write archive files (USN-4169-1) libarchive13_3.2.2-3.1ubuntu0.5_amd64.debLinux
Library to read/write archive files (USN-4169-1) libarchive13_3.1.2-11ubuntu0.16.04.7_i386.debLinux
Library to read/write archive files (USN-4169-1) libarchive13_3.1.2-11ubuntu0.16.04.7_amd64.debLinux
SUSE-SU-2019:3092-1(SUSE Linux Enterprise Desktop 12-SP4 ) libarchive-debugsource-3.1.2-26.6.1.x86_64.rpmLinux
SUSE-SU-2019:3092-1(SUSE Linux Enterprise Desktop 12-SP4 ) libarchive13-3.1.2-26.6.1.x86_64.rpmLinux
SUSE-SU-2019:3092-1(SUSE Linux Enterprise Desktop 12-SP4 ) libarchive13-debuginfo-3.1.2-26.6.1.x86_64.rpmLinux
(RHSA-2020:0203) libarchive security update bsdcpio-3.1.2-14.el7_7.x86_64.rpmLinux
(RHSA-2020:0203) libarchive security update bsdtar-3.1.2-14.el7_7.x86_64.rpmLinux
(RHSA-2020:0203) libarchive security update libarchive-3.1.2-14.el7_7.i686.rpmLinux
(RHSA-2020:0203) libarchive security update libarchive-3.1.2-14.el7_7.x86_64.rpmLinux
(RHSA-2020:0203) libarchive security update libarchive-devel-3.1.2-14.el7_7.i686.rpmLinux
(RHSA-2020:0203) libarchive security update libarchive-devel-3.1.2-14.el7_7.x86_64.rpmLinux
(RHSA-2020:0271) libarchive security update bsdtar-3.3.2-8.el8_1.x86_64.rpmLinux
(RHSA-2020:0271) libarchive security update libarchive-3.3.2-8.el8_1.i686.rpmLinux
(RHSA-2020:0271) libarchive security update libarchive-3.3.2-8.el8_1.x86_64.rpmLinux
(RHSA-2020:0271) libarchive security update libarchive-debugsource-3.3.2-8.el8_1.i686.rpmLinux
(RHSA-2020:0271) libarchive security update libarchive-debugsource-3.3.2-8.el8_1.x86_64.rpmLinux
Bsdtar update (ELSA-2020-0271) bsdtar-3.3.2-8.el8_1.x86_64.rpmLinux
Libarchive update (ELSA-2020-0271) libarchive-3.3.2-8.el8_1.x86_64.rpmLinux
Libarchive-devel update (ELSA-2020-0271) libarchive-devel-3.3.2-8.el8_1.x86_64.rpmLinux
Libarchive update (ELSA-2020-0271) libarchive-3.3.2-8.el8_1.i686.rpmLinux
Libarchive-devel update (ELSA-2020-0271) libarchive-devel-3.3.2-8.el8_1.i686.rpmLinux
(CESA-2020:0271) libarchive security update bsdtar-3.3.2-8.el8_1.x86_64.rpmLinux
(CESA-2020:0271) libarchive security update libarchive-3.3.2-8.el8_1.i686.rpmLinux
(CESA-2020:0271) libarchive security update libarchive-3.3.2-8.el8_1.x86_64.rpmLinux
(CESA-2020:0203) libarchive security update bsdcpio-3.1.2-14.el7_7.x86_64.rpmLinux
(CESA-2020:0203) libarchive security update bsdtar-3.1.2-14.el7_7.x86_64.rpmLinux
(CESA-2020:0203) libarchive security update libarchive-3.1.2-14.el7_7.i686.rpmLinux
(CESA-2020:0203) libarchive security update libarchive-3.1.2-14.el7_7.x86_64.rpmLinux
(CESA-2020:0203) libarchive security update libarchive-devel-3.1.2-14.el7_7.i686.rpmLinux
(CESA-2020:0203) libarchive security update libarchive-devel-3.1.2-14.el7_7.x86_64.rpmLinux
(RHSA-2020:0203)Important: security update libarchive-debuginfo-3.1.2-14.el7_7.i686.rpmLinux
(RHSA-2020:0203)Important: security update libarchive-debuginfo-3.1.2-14.el7_7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234