Buffer overflow in libarchive (Alpine package)

1) Buffer overflow

EUVDB-ID: #VU25750

Risk: High

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2020-9308

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing RAR5 files in archive_read_support_format_rar5.c in libarchive. A remote attacker can create a specially crafted RAR5 file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

libarchive (Alpine package): 3.3.3-r1

CPE2.3

• cpe:2.3:a:alpine:libarchive_alpine_package:3.3.3-r1:*:*:*:*:alpine_linux:*:3.7

External links

https://git.alpinelinux.org/aports/commit/?id=506fdf8e27ee0848f75064cf565b15e53f894446
https://git.alpinelinux.org/aports/commit/?id=ba6aa5f82728e1979741c480f72c2f355662ad6d
https://git.alpinelinux.org/aports/commit/?id=e5273f8295397832bf69ffe39f1004a73f5e0436
https://git.alpinelinux.org/aports/commit/?id=02b0001e987edf632c25303d284508c6e8702a16
https://git.alpinelinux.org/aports/commit/?id=05f80bc8c49760714cad169f99ea7962086e3048

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.