OSV-2020-2324

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libarchive/OSV-2020-2324.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-2324
Withdrawn
2023-01-04T00:00:00Z
Published
2021-12-04T00:01:03Z
Modified
2022-04-13T03:32:31Z
Summary
Heap-buffer-overflow in archive_read_format_cpio_read_header
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21048

Crash type: Heap-buffer-overflow READ {*}
Crash state:
archive_read_format_cpio_read_header
_archive_read_next_header2
_archive_read_next_header
References

Affected packages

OSS-Fuzz / libarchive

Package

Name
libarchive
Purl
pkg:generic/libarchive

Affected ranges

Type
GIT
Repo
https://github.com/libarchive/libarchive.git
Events
Introduced
f001f3b0e6a66a7eb989ed3783791c0316831202
Fixed
56c920eab3352f7877ee0cf9e472c1ab376c7e3e

Affected versions

3.*
3.5.1
v3.*
v3.4.3
v3.5.0
v3.5.1
v3.5.2
v3.5.3

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"f001f3b0e6a66a7eb989ed3783791c0316831202:56c920eab3352f7877ee0cf9e472c1ab376c7e3e"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libarchive/OSV-2020-2324.yaml"