cbcvebase.
CVE-2024-20696
published 2024-01-09

CVE-2024-20696: Windows libarchive Remote Code Execution Vulnerability

high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
Windows libarchive Remote Code Execution Vulnerability

Affected

49 ranges· showing 25
VendorProductVersion rangeFixed in
debianlibarchive< libarchive 3.6.2-1+deb12u2 (bookworm)libarchive 3.6.2-1+deb12u2 (bookworm)
libarchivelibarchive>= 0 < 3.4.3-2+deb11u23.4.3-2+deb11u2
libarchivelibarchive>= 0 < 3.6.2-1+deb12u23.6.2-1+deb12u2
libarchivelibarchive>= 0 < 3.7.4-1.13.7.4-1.1
libarchivelibarchive>= 0 < 3.7.4-1.13.7.4-1.1
libarchivelibarchive>= 0 < 3.6.0-1ubuntu1.63.6.0-1ubuntu1.6
libarchivelibarchive>= 0 < 3.7.2-2ubuntu0.63.7.2-2ubuntu0.6
libarchivelibarchive>= 0 < 3.7.7-0ubuntu3.13.7.7-0ubuntu3.1
libarchivelibarchive>= 0 < 3.1.2-7ubuntu2.8+esm43.1.2-7ubuntu2.8+esm4
libarchivelibarchive>= 0 < 3.1.2-11ubuntu0.16.04.8+esm23.1.2-11ubuntu0.16.04.8+esm2
libarchivelibarchive>= 0 < 3.2.2-3.1ubuntu0.7+esm23.2.2-3.1ubuntu0.7+esm2
libarchivelibarchive>= 0 < 3.4.0-2ubuntu1.5+esm13.4.0-2ubuntu1.5+esm1
microsoftwindows_10_1809< 10.0.17763.532910.0.17763.5329
microsoftwindows_10_21h2< 10.0.19044.393010.0.19044.3930
microsoftwindows_10_22h2< 10.0.19045.393010.0.19045.3930
microsoftwindows_10_version_1809>= 10.0.0 < 10.0.17763.532910.0.17763.5329
microsoftwindows_10_version_1809>= 10.0.17763.0 < 10.0.17763.532910.0.17763.5329
microsoftwindows_10_version_21h2>= 10.0.19043.0 < 10.0.19044.393010.0.19044.3930
microsoftwindows_10_version_22h2>= 10.0.19045.0 < 10.0.19045.393010.0.19045.3930
microsoftwindows_11_21h2< 10.0.22000.271310.0.22000.2713
microsoftwindows_11_22h2< 10.0.22621.300710.0.22621.3007
microsoftwindows_11_23h2< 10.0.22631.300710.0.22631.3007
microsoftwindows_11_version_21h2>= 10.0.0 < 10.0.22000.271310.0.22000.2713
microsoftwindows_11_version_22h2>= 10.0.22621.0 < 10.0.22621.300710.0.22621.3007
microsoftwindows_11_version_22h3>= 10.0.22631.0 < 10.0.22631.300710.0.22631.3007

CVSS provenance

nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
osv7.3HIGH