Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Antekone

#27118of 53,625
9.3Total CVSS
Vulnerabilities · 1
PT-2020-5166
9.3
2020-02-01
Libarchive · Libarchive · CVE-2020-9308
**Name of the Vulnerable Software and Affected Versions** libarchive versions prior to 3.4.2 **Description** The issue is related to errors in input data validation in the archive read support format rar5.c file of the libarchive library. This can lead to a denial of service when handling RAR5 files with invalid or corrupted headers. A remote attacker can exploit this issue by providing specially crafted RAR5 files. **Recommendations** For versions prior to 3.4.2, update to version 3.4.2 or later to resolve the issue. As a temporary workaround, consider restricting the handling of RAR5 files until the update is applied.