Home

CVE-2022-26280

Description

Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS Score
Exploitation Probability
0.123

Associated Vulnerability

VulnerabilityOS Platform
Library to read/write archive files (USN-5374-1) libarchive13_3.4.0-2ubuntu1.2_i386.debLinux
Library to read/write archive files (USN-5374-1) libarchive13_3.4.0-2ubuntu1.2_amd64.debLinux
Library to read/write archive files (USN-5374-1) libarchive13_3.4.3-2ubuntu0.2_i386.debLinux
Library to read/write archive files (USN-5374-1) libarchive13_3.4.3-2ubuntu0.2_amd64.debLinux
Bsdtar update (ELSA-2022-5252) bsdtar-3.5.3-2.el9_0.x86_64.rpmLinux
Libarchive update (ELSA-2022-5252) libarchive-3.5.3-2.el9_0.i686.rpmLinux
Libarchive update (ELSA-2022-5252) libarchive-3.5.3-2.el9_0.x86_64.rpmLinux
(RHSA-2022:5252) libarchive security update bsdtar-3.5.3-2.el9_0.x86_64.rpmLinux
(RHSA-2022:5252) libarchive security update libarchive-3.5.3-2.el9_0.i686.rpmLinux
(RHSA-2022:5252) libarchive security update libarchive-3.5.3-2.el9_0.x86_64.rpmLinux
(RHSA-2022:5252) libarchive security update libarchive-debugsource-3.5.3-2.el9_0.i686.rpmLinux
(RHSA-2022:5252) libarchive security update libarchive-debugsource-3.5.3-2.el9_0.x86_64.rpmLinux
SUSE-SU-2022:1803-1(SUSE Linux Enterprise Module for Basesystem 15-SP3 ) libarchive13-3.4.2-150200.4.6.1.x86_64.rpmLinux
SUSE-SU-2022:1803-1(SUSE Linux Enterprise Module for Basesystem 15-SP3 ) libarchive-devel-3.4.2-150200.4.6.1.x86_64.rpmLinux
libarchive Security Update (ALAS2023-2023-071) libarchive-3.5.3-2.amzn2023.0.2.x86_64.rpmLinux
libarchive Security Update (ALAS2023-2023-071) libarchive-devel-3.5.3-2.amzn2023.0.2.x86_64.rpmLinux
libarchive Security Update (ALAS2023-2023-071) bsdcat-3.5.3-2.amzn2023.0.2.x86_64.rpmLinux
libarchive Security Update (ALAS2023-2023-071) bsdcpio-3.5.3-2.amzn2023.0.2.x86_64.rpmLinux
libarchive Security Update (ALAS2023-2023-071) bsdtar-3.5.3-2.amzn2023.0.2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234