Out-of-bounds read in libarchive - CVE-2024-48957

Vulnerability identifier: #VU98511

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-48957

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the execute_filter_audio() function in archive_read_support_format_rar.c. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory on the system.

libarchive
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Ubuntu
Development Tools Module
Basesystem Module
openSUSE Leap
openEuler
Fedora
APEX Cloud Platform for Microsoft Azure
libarchive13 (Ubuntu package)
libarchive
libarchive-help
libarchive-devel
libarchive-debugsource
libarchive-debuginfo
bsdunzip
bsdtar
bsdcpio
bsdcat
libarchive13t64 (Ubuntu package)
libarchive13-64bit
libarchive13-64bit-debuginfo
libarchive13-32bit
libarchive13-32bit-debuginfo
libarchive13
libarchive13-debuginfo
bsdtar-debuginfo

Install updates from vendor's website.

libarchive - update to 3.7.5
APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
libarchive13 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.4.0-2ubuntu1.3, 3.6.0-1ubuntu1.2
libarchive - addressed in versions 3.7.1-3.fc39, 3.7.2-7.fc40
libarchive-help - update to 3.7.1-5
libarchive-devel - update to 3.7.1-5
libarchive-debugsource - update to 3.7.1-5
libarchive-debuginfo - update to 3.7.1-5
bsdunzip - update to 3.7.1-5
bsdtar - update to 3.7.1-5
bsdcpio - update to 3.7.1-5
bsdcat - update to 3.7.1-5
libarchive - update to 3.7.1-5
libarchive13t64 (Ubuntu package) - update to 3.7.2-2ubuntu0.2
libarchive13-64bit - update to 3.7.2-150600.3.6.1
libarchive13-64bit-debuginfo - update to 3.7.2-150600.3.6.1
libarchive13-32bit - update to 3.7.2-150600.3.6.1
libarchive13-32bit-debuginfo - update to 3.7.2-150600.3.6.1
libarchive13 - update to 3.7.2-150600.3.6.1
libarchive13-debuginfo - update to 3.7.2-150600.3.6.1
libarchive-devel - update to 3.7.2-150600.3.6.1
bsdtar - update to 3.7.2-150600.3.6.1
libarchive-debugsource - update to 3.7.2-150600.3.6.1
bsdtar-debuginfo - update to 3.7.2-150600.3.6.1

• https://github.com/libarchive/libarchive/pull/2149
• https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5

• Multiple vulnerabilities in Libarchive
• Fedora 39 update for libarchive
• Ubuntu update for libarchive
• Fedora 40 update for libarchive
• SUSE update for libarchive
• openEuler 24.03 LTS update for libarchive
• APEX Cloud Platform for Microsoft Azure update for third-party components