A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive-dev" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive-tools" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive13" }, { "binary_version": "3.6.0-1ubuntu1.5", "binary_name": "libarchive13-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive-dev" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive-tools" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive13t64" }, { "binary_version": "3.7.2-2ubuntu0.5", "binary_name": "libarchive13t64-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive-dev" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive-tools" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive13t64" }, { "binary_version": "3.7.7-0ubuntu2.3", "binary_name": "libarchive13t64-dbgsym" } ] }