PT-2007-1031 · Libarchive · Libarchive

Publicado

2007-07-14

·

Atualizado

2017-07-29

·

CVE-2007-3644

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 2.2.4
Description: The issue allows user-assisted remote attackers to cause a denial of service, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This can be achieved through an end-of-file condition within a pax extension header or a malformed pax extension header in a PAX or TAR archive. Exploitation of the issue can be done remotely.
Recommendations: For versions prior to 2.2.4, update to version 2.2.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of libarchive to minimize the risk of exploitation. Avoid using libarchive to process untrusted archives until the issue is resolved.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-02966
BDU:2015-09587
CVE-2007-3644
DSA-1455-1

Produtos afetados

Libarchive