Out-of-Bounds Access Vulnerability in libarchive
CVE-2024-48958

7.8HIGH

Key Information:

Vendor

libarchive

Status
Libarchive
Vendor
CVE Published:
10 October 2024

What is CVE-2024-48958?

A vulnerability exists in libarchive that allows for out-of-bounds access during the processing of crafted RAR archive files. The issue is triggered by the execute_filter_delta function in the archive_read_support_format_rar.c file, where the source pointer can exceed the destination pointer. This flaw impacts libarchive versions before 3.7.5, potentially allowing attackers to exploit affected systems if the crafted RAR files are opened.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/libarchive/libarchive/compare/v3.7.4.....
https://github.com/libarchive/libarchive/pull/2148
https://github.com/terrynini/CVE-Reports/tree/main/CVE-20...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.