Out-of-bounds read in libarchive - CVE-2024-37407
Published: July 18, 2024
Vulnerability identifier: #VU94523
CSH Severity: Medium
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-37407
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the slurp_central_directory() function in archive_read_support_format_zip.c. A remote attacker can create a specially crafted archive, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory on the system.
Affected software
libarchive
DataStage on Cloud Pak for Data
Oracle Solaris
DataStage on Cloud Pak for Data
Oracle Solaris
How to mitigate CVE-2024-37407
Install updates from vendor's website.
libarchive - update to 3.7.4
DataStage on Cloud Pak for Data - update to 5.2.1
Oracle Solaris - update to 11.4 SRU 71
DataStage on Cloud Pak for Data - update to 5.2.1
Oracle Solaris - update to 11.4 SRU 71