PT-2024-7937 · Unknown+6 · Libarchive+6
Published
2024-04-27
·
Updated
2025-11-25
·
CVE-2024-48958
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libarchive versions prior to 3.7.5
Description
The issue is related to the
execute filter delta function in the archive read support format rar.c component of the libarchive library, which allows out-of-bounds access to data when reading a specially crafted archive file. This can potentially enable an attacker to access confidential data, compromise data integrity, and cause a denial of service. The src can move beyond the dst due to the vulnerability.Recommendations
For libarchive versions prior to 3.7.5, update to version 3.7.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
execute filter delta function in archive read support format rar.c until a patch is available. Avoid using specially crafted archive files that can exploit the out-of-bounds access vulnerability.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Apple Macos
Red Os
Suse
Ubuntu
Libarchive