libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archivereadsupportformat7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "3.1.2-7ubuntu2.8", "binary_name": "bsdcpio" }, { "binary_version": "3.1.2-7ubuntu2.8", "binary_name": "bsdcpio-dbgsym" }, { "binary_version": "3.1.2-7ubuntu2.8", "binary_name": "bsdtar" }, { "binary_version": "3.1.2-7ubuntu2.8", "binary_name": "bsdtar-dbgsym" }, { "binary_version": "3.1.2-7ubuntu2.8", "binary_name": "libarchive-dev" }, { "binary_version": "3.1.2-7ubuntu2.8", "binary_name": "libarchive13" }, { "binary_version": "3.1.2-7ubuntu2.8", "binary_name": "libarchive13-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "3.1.2-11ubuntu0.16.04.6", "binary_name": "bsdcpio" }, { "binary_version": "3.1.2-11ubuntu0.16.04.6", "binary_name": "bsdcpio-dbgsym" }, { "binary_version": "3.1.2-11ubuntu0.16.04.6", "binary_name": "bsdtar" }, { "binary_version": "3.1.2-11ubuntu0.16.04.6", "binary_name": "bsdtar-dbgsym" }, { "binary_version": "3.1.2-11ubuntu0.16.04.6", "binary_name": "libarchive-dev" }, { "binary_version": "3.1.2-11ubuntu0.16.04.6", "binary_name": "libarchive13" }, { "binary_version": "3.1.2-11ubuntu0.16.04.6", "binary_name": "libarchive13-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "3.2.2-3.1ubuntu0.3", "binary_name": "bsdcpio" }, { "binary_version": "3.2.2-3.1ubuntu0.3", "binary_name": "bsdtar" }, { "binary_version": "3.2.2-3.1ubuntu0.3", "binary_name": "libarchive-dev" }, { "binary_version": "3.2.2-3.1ubuntu0.3", "binary_name": "libarchive-tools" }, { "binary_version": "3.2.2-3.1ubuntu0.3", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.2.2-3.1ubuntu0.3", "binary_name": "libarchive13" }, { "binary_version": "3.2.2-3.1ubuntu0.3", "binary_name": "libarchive13-dbgsym" } ] }