Out-of-bounds read in libarchive - CVE-2019-1000019

Vulnerability identifier: #VU20838

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-1000019

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in the header_bytes() function in  archive_read_support_format_7zip.c when decompressing 7zip archives. A remote attacker can create a specially crafted 7zip file, trick the victim into opening it, trigger out-of-bounds read error and crash the affected application.

libarchive
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for x86_64
Opensuse
Fedora
BIG-IP
libarchive
Data Computing Appliance (DCA)

Install update from vendor's website.

libarchive - update to 3.3.1
libarchive - addressed in versions 3.3.3-6.fc28, 3.3.3-6.fc29, 3.3.3-6.fc30
Data Computing Appliance (DCA) - update to 4.3.0.0

• https://github.com/libarchive/libarchive/pull/1120
• https://github.com/libarchive/libarchive/pull/1120/commits/65a23f5dbee4497064e9bb467f81138a62b0dae1

• Denial of service in libarchive
• OpenSUSE Linux update for libarchive
• Arch Linux update for libarchive
• Red Hat update for libarchive
• Amazon Linux AMI update for libarchive
• Red Hat update for libarchive
• OpenSUSE Linux update for libarchive
• OpenSUSE Linux update for libarchive
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Multiple vulnerabilities in F5 BIG-IP configuration and tmsh utilities
• Fedora 28 update for libarchive
• Fedora 30 update for libarchive
• Fedora 29 update for libarchive