Use-after-free in libarchive - CVE-2021-36976

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU59459

Use-after-free in libarchive - CVE-2021-36976

Published: January 11, 2022


Vulnerability identifier: #VU59459
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-36976
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in copy_string. A remote attacker can cause a denial of service condition on the target system.


Affected software

libarchive
Amazon Linux AMI
Gentoo Linux
SUSE Manager Proxy
SUSE Manager Server
watchOS
Microsoft Windows
macOS
iPadOS
Apple iOS
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
openSUSE Leap
openEuler
Ubuntu
Fedora
Windows Server
Splunk Universal Forwarder
Splunk Enterprise
libarchive13 (Ubuntu package)
libarchive13-debuginfo
libarchive13
libarchive-devel
bsdtar
bsdtar-debuginfo
libarchive-debugsource
libarchive
libarchive-debuginfo
libarchive-help
libarchive13-32bit-debuginfo
libarchive13-32bit
app-arch/libarchive
Dell EMC VxRail Appliance
Solutions Enabler
Unisphere 360
Unisphere for PowerMax Virtual Appliance
Unisphere for PowerMax
VASA Provider Standalone
Solutions Enabler Virtual Appliance

How to mitigate CVE-2021-36976

Install updates from vendor's website.

libarchive - update to 3.5.2
watchOS - update to 8.5 19T242
Splunk Universal Forwarder - addressed in versions 8.1.14, 8.2.11, 9.0.5
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
macOS - update to 12.3 21E230
iPadOS - update to 15.4 19E241
Apple iOS - update to 15.4 19E241
libarchive13 (Ubuntu package) - addressed in versions 3.4.0-2ubuntu1.1, 3.4.3-2ubuntu0.1
libarchive13-debuginfo - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive13 - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive-devel - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
bsdtar - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
bsdtar-debuginfo - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive-debugsource - addressed in versions 3.4.2-150200.4.3.1, 3.5.1-150400.3.3.1
libarchive - update to 3.4.3-3
libarchive-debuginfo - update to 3.4.3-3
libarchive-devel - update to 3.4.3-3
libarchive-debugsource - update to 3.4.3-3
libarchive-help - update to 3.4.3-3
libarchive13-32bit-debuginfo - update to 3.5.1-150400.3.3.1
libarchive13-32bit - update to 3.5.1-150400.3.3.1
libarchive - update to 3.5.3-1.fc35
libarchive - update to 3.5.3-2
app-arch/libarchive - update to 3.6.1
Dell EMC VxRail Appliance - update to 7.0.411
Solutions Enabler - addressed in versions 9.1.0.19, 9.2.3.1
Solutions Enabler Virtual Appliance - addressed in versions 9.1.0.19, 9.2.3.1
Unisphere 360 - addressed in versions 9.1.0.30, 9.2.3.4
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.1.0.32, 9.2.3.11
Unisphere for PowerMax - addressed in versions 9.1.0.32, 9.2.3.11
VASA Provider Standalone - addressed in versions 9.1.0.724, 9.2.3.10

External References

Related Security Bulletins