Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 9: 2024-0346 moderate: libarchive out-of-bounds access

mageia
Calendar Grey November 6, 2024
Dist Mageia Esm H88
Fedora 2024-0567 updates fix libarchive vulnerabilities, tackling severe buffer overflow problems and additional issues.
execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst

Summary

execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. (CVE-2024-48957) execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. (CVE-2024-48958)

References

- https://bugs.mageia.org/show_bug.cgi?id=33717

- https://www.cve.org/CVERecord?id=CVE-2024-48957

- https://www.cve.org/CVERecord?id=CVE-2024-48958

Topics%20covered

Topics Covered

security advisory security update buffer overflow out-of-bounds access libarchive Mageia archive

Resolution

SRPMS

- 9/core/libarchive-3.6.2-5.2.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Nov 2024
URL: https://advisories.mageia.org/MGASA-2024-0346.html
Type: security
CVE: CVE-2024-48957, CVE-2024-48958

Topics%20covered

Topics Covered

security advisory security update buffer overflow out-of-bounds access libarchive Mageia archive

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here