Buffer overflow in libarchive - CVE-2020-9308

Vulnerability identifier: #VU25750

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-9308

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing RAR5 files in archive_read_support_format_rar5.c in libarchive. A remote attacker can create a specially crafted RAR5 file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

libarchive
Gentoo Linux
openEuler
Fedora
VLC Media Player
libarchive (Ubuntu package)
libarchive (Alpine package)
libarchive
libarchive-debuginfo
libarchive-debugsource
libarchive-devel
libarchive-help

Install updates from vendor's website.

libarchive - update to 3.4.2
VLC Media Player - update to 3.0.11
libarchive (Ubuntu package) - addressed in versions 3.1.2-11ubuntu0.16.04.8, 3.2.2-3.1ubuntu0.6, 3.4.0-1ubuntu0.1
libarchive (Alpine package) - update to 3.3.3-r2
libarchive - update to 3.4.1-3
libarchive-debuginfo - update to 3.4.1-3
libarchive-debugsource - update to 3.4.1-3
libarchive-devel - update to 3.4.1-3
libarchive-help - update to 3.4.1-3
libarchive - addressed in versions 3.4.3-1.fc31, 3.4.3-1.fc32

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20459
• https://github.com/libarchive/libarchive/pull/1326
• https://github.com/libarchive/libarchive/pull/1326/commits/94821008d6eea81e315c5881cdf739202961040a

• Memory corruption in libarchive
• Ubuntu update for libarchive
• Gentoo update for libarchive
• Multiple vulnerabilities in VLC Media Player
• Buffer overflow in libarchive (Alpine package)
• openEuler 20.03 LTS update for libarchive
• Fedora 31 update for libarchive
• Fedora 32 update for libarchive