A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libarchive-dev", "binary_version": "3.6.0-1ubuntu1.5" }, { "binary_name": "libarchive-tools", "binary_version": "3.6.0-1ubuntu1.5" }, { "binary_name": "libarchive-tools-dbgsym", "binary_version": "3.6.0-1ubuntu1.5" }, { "binary_name": "libarchive13", "binary_version": "3.6.0-1ubuntu1.5" }, { "binary_name": "libarchive13-dbgsym", "binary_version": "3.6.0-1ubuntu1.5" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libarchive-dev", "binary_version": "3.7.4-1ubuntu0.3" }, { "binary_name": "libarchive-tools", "binary_version": "3.7.4-1ubuntu0.3" }, { "binary_name": "libarchive-tools-dbgsym", "binary_version": "3.7.4-1ubuntu0.3" }, { "binary_name": "libarchive13t64", "binary_version": "3.7.4-1ubuntu0.3" }, { "binary_name": "libarchive13t64-dbgsym", "binary_version": "3.7.4-1ubuntu0.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libarchive-dev", "binary_version": "3.7.2-2ubuntu0.5" }, { "binary_name": "libarchive-tools", "binary_version": "3.7.2-2ubuntu0.5" }, { "binary_name": "libarchive-tools-dbgsym", "binary_version": "3.7.2-2ubuntu0.5" }, { "binary_name": "libarchive13t64", "binary_version": "3.7.2-2ubuntu0.5" }, { "binary_name": "libarchive13t64-dbgsym", "binary_version": "3.7.2-2ubuntu0.5" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libarchive-dev", "binary_version": "3.7.7-0ubuntu2.3" }, { "binary_name": "libarchive-tools", "binary_version": "3.7.7-0ubuntu2.3" }, { "binary_name": "libarchive-tools-dbgsym", "binary_version": "3.7.7-0ubuntu2.3" }, { "binary_name": "libarchive13t64", "binary_version": "3.7.7-0ubuntu2.3" }, { "binary_name": "libarchive13t64-dbgsym", "binary_version": "3.7.7-0ubuntu2.3" } ] }