NULL Pointer Dereference in libarchive Affects Multiple Distributions
CVE-2022-36227

9.8CRITICAL

Key Information:

Vendor

Libarchive

Status
Libarchive
Vendor
CVE Published:
22 November 2022

What is CVE-2022-36227?

In libarchive versions prior to 3.6.2, an error is not checked after the calloc function is called, which could yield a NULL pointer if memory allocation fails. This scenario may result in a NULL pointer dereference, leading to potential memory access issues. There is ongoing debate regarding the exploitability of this vulnerability, with some experts suggesting that under specific conditions, writing to or reading from the NULL pointer could lead to code execution, especially if privileged code is involved.

References

https://github.com/libarchive/libarchive/issues/1754
https://bugs.gentoo.org/882521
https://github.com/libarchive/libarchive/blob/v3.0.0a/lib...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.