A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
{ "binaries": [ { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive-dev" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive-tools" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive13" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive13-dbgsym" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "3.7.4-1ubuntu0.3", "binary_name": "libarchive-dev" }, { "binary_version": "3.7.4-1ubuntu0.3", "binary_name": "libarchive-tools" }, { "binary_version": "3.7.4-1ubuntu0.3", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.7.4-1ubuntu0.3", "binary_name": "libarchive13t64" }, { "binary_version": "3.7.4-1ubuntu0.3", "binary_name": "libarchive13t64-dbgsym" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive-dev" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive-tools" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive13t64" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive13t64-dbgsym" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive-dev" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive-tools" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive13t64" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive13t64-dbgsym" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }