AZL-109788
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109788.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109788
- Upstream
- CVE-2026-17591
- Published
- 2026-10-16T23:17:01Z
- Modified
- 2026-10-21T14:17:40Z
- Summary
- CVE-2026-17591 affecting package libarchive 3.7.7-7
- Details
-
A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.
- References