OSV-2018-160

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2018-160

Published

2021-01-13T00:01:07.606550Z

Modified

2022-04-13T03:04:41.216636Z

Summary

Heap-buffer-overflow in do_uncompress_block

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11011

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
do_uncompress_block
process_block
do_uncompress_file

References

Affected packages

Type: GIT
Repo: https://github.com/libarchive/libarchive.git
Events: Introduced

58167a9af435618c44e2faef5af5a86af51c003a

Fixed

b52dd6c9e4ef7cf95c2a6ae5ab7ccac7f6d462a1

{
    "severity": "HIGH"
}