CVE-2024-37407 — Out-of-bounds Read in Libarchive

CWE-125 — Out-of-bounds ReadCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
9.1CRITICALNVD
EPSS
0.5%
top 32.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
LibarchiveDebian LibarchiveMsrc Azl3 Libarchive 3.7.1-2 ON Azure Linux 3.0+2 more
Timeline
PublishedJun 8
Latest updateJun 11

Description

Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directory in archive_read_support_format_zip.c.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages5 packages

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-xjwr-37fp-hq82: Libarchive before 3↗2024-06-08
▶

📋Vendor Advisories

3
Microsoft
Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directory in archive_read_support_format_zip.c.↗2024-06-11
▶
Red Hat
libarchive: Out of bounds access in slurp_central_directory at archive_read_support_format_zip.c↗2024-06-08
▶
Debian
CVE-2024-37407: libarchive - Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has ...↗2024
▶