Use-after-free error in libarchive - CVE-2018-1000878

Vulnerability identifier: #VU16727

CSH Severity: Low

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1000878

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition.

The vulnerability exists due to use-after-free error in RAR decoder - libarchive/archive_read_support_format_rar.c. A remote attacker can trick the victim into opening a specially crafted RAR archive and cause the service to crash.

libarchive
Debian Linux
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for x86_64
Opensuse
Fedora
Traffix SDC
BIG-IQ Centralized Management
BIG-IP
libarchive
Data Computing Appliance (DCA)

Install update from vendor's website.

libarchive - addressed in versions 3.3.3-6.fc28, 3.3.3-6.fc29, 3.3.3-6.fc30
Data Computing Appliance (DCA) - update to 4.3.0.0

• https://github.com/libarchive/libarchive/pull/1105
• https://github.com/libarchive/libarchive/pull/1105/commits/bfcfe6f04ed20db2504db8a254d1f40a1d84eb28

• Denial of service in libarchive
• Debian update for libarchive
• OpenSUSE Linux update for libarchive
• Arch Linux update for libarchive
• Red Hat update for libarchive
• Amazon Linux AMI update for libarchive
• Red Hat update for libarchive
• OpenSUSE Linux update for libarchive
• OpenSUSE Linux update for libarchive
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Two libarchive vulnerabilities in F5 BIG-IP
• Two libarchive vulnerabilities in F5 BIG-IQ Centralized Management
• Two libarchive vulnerabilities in F5 Traffix SDC
• Fedora 28 update for libarchive
• Fedora 30 update for libarchive
• Fedora 29 update for libarchive