Out-of-bounds read in libarchive - CVE-2017-5601

Vulnerability identifier: #VU33268

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-5601

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

libarchive
libarchive (Alpine package)
libarchive
bsdtar
bsdtar-debuginfo
libarchive-debugsource
libarchive-devel
libarchive13
libarchive13-debuginfo
libarchive13-32bit
libarchive13-32bit-debuginfo
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
openSUSE Leap
Fedora
Dell EMC VxRail Appliance

Install update from vendor's website.

libarchive - update to 3.3.0
libarchive (Alpine package) - addressed in versions 3.2.2-r0, 3.2.2-r1
libarchive - addressed in versions 3.2.2-2.fc25, 3.2.2-4.fc26
bsdtar - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
bsdtar-debuginfo - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive-debugsource - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive-devel - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive13 - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive13-debuginfo - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive13-32bit - update to 3.5.1-150400.3.3.1
libarchive13-32bit-debuginfo - update to 3.5.1-150400.3.3.1
Dell EMC VxRail Appliance - update to 7.0.411

• http://www.securityfocus.com/bid/95837
• http://www.securitytracker.com/id/1037974
• https://github.com/libarchive/libarchive/commit/98dcbbf0bf4854bf987557e55e55fff7abbf3ea9
• https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html
• https://secunia.com/secunia_research/2017-3/

• Out-of-bounds read in libarchive
• Out-of-bounds read in libarchive (Alpine package)
• SUSE update for libarchive
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• SUSE update for libarchive
• Fedora 26 update for libarchive
• Fedora 25 update for libarchive