Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 9: MGASA-2024-0363 Critical: libarchive heap-based issue

mageia
Calendar Grey November 13, 2024
Dist Mageia Esm H88
Safety notice for Mageia: libarchive revisions tackle heap-related overflow vulnerabilities that impact operational reliability.
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if ...

Summary

A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if a specially crafted RAR archive is processed. (CVE-2024-20696)

References

- https://bugs.mageia.org/show_bug.cgi?id=33757

- https://lists.debian.org/debian-security-announce/2024/msg00220.html

- https://www.cve.org/CVERecord?id=CVE-2024-20696

Topics%20covered

Topics Covered

security advisory execution risk compression library libarchive heap-based issue Mageia

Resolution

SRPMS

- 9/core/libarchive-3.6.2-5.3.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 13 Nov 2024
URL: https://advisories.mageia.org/MGASA-2024-0363.html
Type: security
CVE: CVE-2024-20696

Topics%20covered

Topics Covered

security advisory execution risk compression library libarchive heap-based issue Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here