PT-2024-2786 · Unknown+6 · Libarchive+6

Terrynini · Published 2024-04-09 · Updated 2025-11-25 · CVE-2024-26256

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description The vulnerability is related to a heap-based buffer overflow in the libarchive library, which can allow remote attackers to execute arbitrary code. This issue is associated with a buffer operation exceeding memory boundaries. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include a heap-based buffer overflow in the run filters function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

ALT-PU-2024-13156

ALT-PU-2024-13375

AZL-42370

AZL-42383

BDU:2024-02924

CVE-2024-26256

DSA-5706-1

JLSEC-2025-239

MGASA-2024-0154

OPENSUSE-SU-2024:13929-1

SUSE-SU-2025:20087-1

SUSE-SU-2025:20257-1

USN-6805-1

ZDI-24-1698

Affected Products

Alt Linux

Astra Linux

Linuxmint

Red Os

Ubuntu

Windows

Libarchive

References · 67

• https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch · Patch
• https://github.com/LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262 · Patch
• https://osv.dev/vulnerability/AZL-42383 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26256 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26256 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2024-26256 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13929-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26256 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0154 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/708793 · Security Note
• https://bdu.fstec.ru/vul/2024-02924 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1698 · Security Note
• https://advisories.mageia.org/MGASA-2024-0154.html · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26256 · Security Note