K000140961: libarchive vulnerability CVE-2021-23177

🗓️ 06 Sep 2024 00:00:52Reported by f5Type

f5🔗 my.f5.com👁 37 Views

An improper link resolution flaw in libarchive allows a local attacker to change ACL and gain more privileges

Reporter	Title	Published	Views	Family All 92
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	26 Jul 202214:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	28 Oct 202219:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.6 contains fixes for multiple security vulnerabilities.	25 Oct 202213:11	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0019: libarchive (ALINUX3-SA-2022:0019)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : libarchive (CESA-2022:0892)	15 Mar 202200:00	–	nessus
Tenable Nessus	Debian DLA-2987-1 : libarchive - LTS security update	2 May 202200:00	–	nessus
Tenable Nessus	Debian dla-3202 : bsdcpio - security update	23 Nov 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : libarchive (EulerOS-SA-2022-1353)	28 Mar 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : libarchive (EulerOS-SA-2022-1430)	18 Apr 202200:00	–	nessus

Vulners

Node

f5 big-ip_aamRange17.5.0–17.5.1

OR

f5 big-ip_afmRange17.5.0–17.5.1

OR

f5 big-ip_analyticsRange17.5.0–17.5.1

OR

f5 big-ip_apmRange17.5.0–17.5.1

OR

f5 big-ip_asmRange17.5.0–17.5.1

OR

f5 big-ip_ddos_hybrid_defenderRange17.5.0–17.5.1

OR

f5 big-ip_dnsRange17.5.0–17.5.1

OR

f5 big-ip_fpsRange17.5.0–17.5.1

OR

f5 big-ip_link_controllerRange17.5.0–17.5.1

OR

f5 big-ip_ltmRange17.5.0–17.5.1

OR

f5 big-ip_pemRange17.5.0–17.5.1

OR

f5 big-ip_ssl_orchestratorRange17.5.0–17.5.1

OR

f5 big-ip_aamRange17.1.0–17.1.2

OR

f5 big-ip_afmRange17.1.0–17.1.2

OR

f5 big-ip_analyticsRange17.1.0–17.1.2

OR

f5 big-ip_apmRange17.1.0–17.1.2

OR

f5 big-ip_asmRange17.1.0–17.1.2

OR

f5 big-ip_ddos_hybrid_defenderRange17.1.0–17.1.2

OR

f5 big-ip_dnsRange17.1.0–17.1.2

OR

f5 big-ip_fpsRange17.1.0–17.1.2

OR

f5 big-ip_link_controllerRange17.1.0–17.1.2

OR

f5 big-ip_ltmRange17.1.0–17.1.2

OR

f5 big-ip_pemRange17.1.0–17.1.2

OR

f5 big-ip_ssl_orchestratorRange17.1.0–17.1.2

OR

f5 big-ip_aamRange16.1.0–16.1.6

OR

f5 big-ip_afmRange16.1.0–16.1.6

OR

f5 big-ip_analyticsRange16.1.0–16.1.6

OR

f5 big-ip_apmRange16.1.0–16.1.6

OR

f5 big-ip_asmRange16.1.0–16.1.6

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.6

OR

f5 big-ip_dnsRange16.1.0–16.1.6

OR

f5 big-ip_fpsRange16.1.0–16.1.6

OR

f5 big-ip_link_controllerRange16.1.0–16.1.6

OR

f5 big-ip_ltmRange16.1.0–16.1.6

OR

f5 big-ip_pemRange16.1.0–16.1.6

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.6

OR

f5 big-ip_aamRange15.1.0–15.1.10

OR

f5 big-ip_afmRange15.1.0–15.1.10

OR

f5 big-ip_analyticsRange15.1.0–15.1.10

OR

f5 big-ip_apmRange15.1.0–15.1.10

OR

f5 big-ip_asmRange15.1.0–15.1.10

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.10

OR

f5 big-ip_dnsRange15.1.0–15.1.10

OR

f5 big-ip_fpsRange15.1.0–15.1.10

OR

f5 big-ip_link_controllerRange15.1.0–15.1.10

OR

f5 big-ip_ltmRange15.1.0–15.1.10

OR

f5 big-ip_pemRange15.1.0–15.1.10

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.10

OR

f5 big-iq_centralized_managementRange8.2.0–8.3.0

OR

f5 traffix_sdcMatch5.2.0

15 Oct 2025 06:32Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.8

EPSS0.00367

libarchive improper link resolution acl local attacker privileges