Integer overflow in Microsoft Windows and Windows Server - CVE-2024-20696

Vulnerability identifier: #VU85183

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-20696

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to integer overflow within the rar4 reader in Libarchive. A remote user can trick a victim to open a specially crafted file and execute arbitrary code on the target system.

Microsoft Windows
Windows Server
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Ubuntu
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
Development Tools Module
openSUSE Leap
openEuler
Fedora
libarchive
RecoverPoint for Virtual Machines
libarchive (Ubuntu package)
libarchive-debugsource
libarchive-devel
libarchive13-debuginfo
libarchive13
libarchive13 (Ubuntu package)
bsdtar-debuginfo
bsdtar
libarchive
libarchive-debuginfo
libarchive-help
libarchive13-64bit-debuginfo
libarchive13-64bit
libarchive13-32bit-debuginfo
libarchive13-32bit
libarchive (Debian package)
libarchive13t64 (Ubuntu package)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell EMC VxRail Appliance

Install updates from vendor's website.

libarchive - update to 3.7.5
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
libarchive (Ubuntu package) - addressed in versions 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1
libarchive-debugsource - addressed in versions 3.3.3-32.11.1, 3.4.2-150200.4.18.1, 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive-devel - addressed in versions 3.3.3-32.11.1, 3.4.2-150200.4.18.1, 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive13-debuginfo - addressed in versions 3.3.3-32.11.1, 3.4.2-150200.4.18.1, 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive13 - addressed in versions 3.3.3-32.11.1, 3.4.2-150200.4.18.1, 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive13 (Ubuntu package) - addressed in versions 3.4.0-2ubuntu1.4, 3.6.0-1ubuntu1.3
bsdtar-debuginfo - addressed in versions 3.4.2-150200.4.18.1, 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
bsdtar - addressed in versions 3.4.2-150200.4.18.1, 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive - update to 3.4.3-8
libarchive-debuginfo - update to 3.4.3-8
libarchive-devel - update to 3.4.3-8
libarchive-debugsource - update to 3.4.3-8
libarchive-help - update to 3.4.3-8
libarchive13-64bit-debuginfo - addressed in versions 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive13-64bit - addressed in versions 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive13-32bit-debuginfo - addressed in versions 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive13-32bit - addressed in versions 3.5.1-150400.3.15.1, 3.7.2-150600.3.3.1
libarchive (Debian package) - update to 3.6.2-1+deb12u2
libarchive13t64 (Ubuntu package) - addressed in versions 3.7.2-2ubuntu0.3, 3.7.4-1ubuntu0.1
libarchive - update to 3.7.4-2.fc41
libarchive - update to 3.7.5
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
Dell EMC VxRail Appliance - update to 8.0.213

• Exploit #9861 - CVE-2024-20696 (May 23, 2024)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-20696
• https://github.com/libarchive/libarchive/pull/2172
• https://github.com/libarchive/libarchive/releases/tag/v3.7.5

• Multiple vulnerabilities in Microsoft Windows Libarchive
• Fedora 41 update for libarchive
• openEuler update for libarchive
• SUSE update for libarchive
• SUSE update for libarchive
• SUSE update for libarchive
• SUSE update for libarchive
• SUSE update for libarchive
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Slackware Linux update for libarchive
• Multiple vulnerabilities in Libarchive
• Ubuntu update for libarchive
• Debian update for libarchive
• Dell RecoverPoint for Virtual Machines update for third-party components
• Ubuntu update for libarchive