Out-of-bounds read in libarchive - CVE-2024-48958

Vulnerability identifier: #VU98512

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-48958

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the execute_filter_delta() function in archive_read_support_format_rar.c. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory on the system.

libarchive
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
visionOS
watchOS
Ubuntu
macOS
Basesystem Module
Development Tools Module
openSUSE Leap
tvOS
iPadOS
Apple iOS
openEuler
APEX Cloud Platform for Microsoft Azure
libarchive13 (Ubuntu package)
libarchive-debuginfo
libarchive-help
libarchive-devel
libarchive-debugsource
bsdunzip
bsdtar
bsdcpio
bsdcat
libarchive
libarchive13t64 (Ubuntu package)
libarchive13
libarchive13-64bit
libarchive13-64bit-debuginfo
libarchive13-32bit-debuginfo
libarchive13-32bit
libarchive13-debuginfo
bsdtar-debuginfo
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

Install updates from vendor's website.

libarchive - update to 3.7.5
visionOS - update to 2.4
APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
watchOS - update to 11.4
macOS - update to 15.4 24E248
tvOS - update to 18.4
iPadOS - update to 18.4 22E240
Apple iOS - update to 18.4 22E240
libarchive13 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.4.0-2ubuntu1.3, 3.6.0-1ubuntu1.2
libarchive-debuginfo - update to 3.7.1-5
libarchive-help - update to 3.7.1-5
libarchive-devel - update to 3.7.1-5
libarchive-debugsource - update to 3.7.1-5
bsdunzip - update to 3.7.1-5
bsdtar - update to 3.7.1-5
bsdcpio - update to 3.7.1-5
bsdcat - update to 3.7.1-5
libarchive - update to 3.7.1-5
libarchive13t64 (Ubuntu package) - update to 3.7.2-2ubuntu0.2
libarchive13 - update to 3.7.2-150600.3.9.1
libarchive13-64bit - update to 3.7.2-150600.3.9.1
libarchive13-64bit-debuginfo - update to 3.7.2-150600.3.9.1
libarchive13-32bit-debuginfo - update to 3.7.2-150600.3.9.1
libarchive13-32bit - update to 3.7.2-150600.3.9.1
libarchive-devel - update to 3.7.2-150600.3.9.1
libarchive13-debuginfo - update to 3.7.2-150600.3.9.1
libarchive-debugsource - update to 3.7.2-150600.3.9.1
bsdtar-debuginfo - update to 3.7.2-150600.3.9.1
bsdtar - update to 3.7.2-150600.3.9.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.8

• https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5
• https://github.com/libarchive/libarchive/pull/2148

• Multiple vulnerabilities in Libarchive
• Ubuntu update for libarchive
• openEuler 24.03 LTS update for libarchive
• SUSE update for libarchive
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in macOS Sequoia
• Multiple vulnerabilities in Apple iOS 18 and iPadOS 18
• Multiple vulnerabilities in Apple tvOS
• Multiple vulnerabilities in Apple visionOS
• Multiple vulnerabilities in Apple watchOS