Double-free error in libarchive - CVE-2018-1000877

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU16726

Double-free error in libarchive - CVE-2018-1000877

Published: December 20, 2018 / Updated: December 27, 2018


Vulnerability identifier: #VU16726
CSH Severity: Low
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1000877
CWE-ID: CWE-415
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause DoS condition.

The vulnerability exists due to double-free error in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0. A remote attacker can trick the victim into opening a specially crafted RAR archive and cause the service to crash.


Affected software

libarchive
Debian Linux
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for x86_64
Opensuse
Fedora
Traffix SDC
BIG-IQ Centralized Management
BIG-IP
libarchive
Data Computing Appliance (DCA)

How to mitigate CVE-2018-1000877

Install update from vendor's website.

libarchive - addressed in versions 3.3.3-6.fc28, 3.3.3-6.fc29, 3.3.3-6.fc30
Data Computing Appliance (DCA) - update to 4.3.0.0

External References

Related Security Bulletins