CVE-2024-26256 — Heap-based Buffer Overflow in Libarchive

CWE-122 — Heap-based Buffer Overflow11 documents8 sources
Severity
7.8HIGHCNA
No vector
EPSS
41.3%
top 2.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Microsoft Windows 11 Version 22h2Microsoft Windows 11 Version 22h3Microsoft Windows 11 Version 23h2+6 more
Timeline
PublishedApr 9
Latest updateJun 4

Description

Libarchive Remote Code Execution Vulnerability Libarchive Remote Code Execution Vulnerability

Affected Packages9 packages

▶debiandebian/libarchive< libarchive 3.6.2-1+deb12u1 (bookworm)
▶CVEListV5microsoft/windows_11_version_22h210.0.22621.0 — 10.0.22621.3447
▶CVEListV5microsoft/windows_11_version_22h310.0.22631.0 — 10.0.22631.3447
▶CVEListV5microsoft/windows_11_version_23h210.0.22631.0 — 10.0.22631.3447

🔴Vulnerability Details

1
CVEList
Libarchive Remote Code Execution Vulnerability↗2024-04-09
▶

📋Vendor Advisories

5
Ubuntu
libarchive vulnerability↗2024-06-04
▶
Microsoft
Libarchive Remote Code Execution Vulnerability↗2024-04-09
▶
Red Hat
libarchive: Heap based buffer overflow in rar e8 filter↗2024-04-09
▶
Red Hat
libarchive: Heap based buffer overflow in rar e8 filter↗2024-01-09
▶
Debian
CVE-2024-26256: libarchive - Libarchive Remote Code Execution Vulnerability↗2024
▶

🕵️Threat Intelligence

5
Qualys
Microsoft and Adobe Patch Tuesday, April 2024 Security Update Review↗2024-04-09
▶
Trendmicro
The April 2024 Security Updates Review↗2024-04-09
▶
Bleepingcomputer
Microsoft April 2024 Patch Tuesday fixes 150 security flaws, 67 RCEs↗2024-04-09
▶
Trendmicro
The April 2024 Security Updates Review↗2024-04-09
▶
Qualys
Security Update Review: Microsoft & Adobe April 2024 Patch Tuesday | Qualys↗2024-04-09
▶
CVE-2024-26256 — Heap-based Buffer Overflow | cvebase