execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
History

Tue, 15 Oct 2024 02:30:00 +0000

Type Values Removed Values Added
Title libarchive: From CVEorg collector libarchive: Out-of-bounds access in libarchive's RAR file handling

Fri, 11 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 11 Oct 2024 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Libarchive
Libarchive libarchive
CPEs cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
Vendors & Products Libarchive
Libarchive libarchive

Fri, 11 Oct 2024 01:45:00 +0000

Type Values Removed Values Added
Title libarchive: From CVEorg collector
Weaknesses CWE-125
References
Metrics threat_severity

None

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

threat_severity

Important


Thu, 10 Oct 2024 01:45:00 +0000

Type Values Removed Values Added
Description execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-10-10T00:00:00

Updated: 2024-10-10T20:35:53.287Z

Reserved: 2024-10-10T00:00:00

Link: CVE-2024-48958

cve-icon Vulnrichment

Updated: 2024-10-10T20:35:30.230Z

cve-icon NVD

Status : Modified

Published: 2024-10-10T02:15:03.057

Modified: 2024-10-11T21:36:48.687

Link: CVE-2024-48958

cve-icon Redhat

Severity : Important

Publid Date: 2024-10-10T00:00:00Z

Links: CVE-2024-48958 - Bugzilla