Lucene search

K
freebsdFreeBSD792BC222-C5D7-11DB-9F82-000E0C2E438A
HistoryNov 08, 2006 - 12:00 a.m.

libarchive -- Infinite loop in corrupt archives handling in libarchive

2006-11-0800:00:00
vuxml.freebsd.org
13

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

81.1%

Problem Description:
If the end of an archive is reached while attempting to
“skip” past a region of an archive, libarchive will enter an
infinite loop wherein it repeatedly attempts (and fails) to
read further data.
Impact:
An attacker able to cause a system to extract (via “tar -x”
or another application which uses libarchive) or list the
contents (via “tar -t” or another libarchive-using
application) of an archive provided by the attacker can cause
libarchive to enter an infinite loop and use all available
CPU time.
Workaround:
No workaround is available.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibarchive< 1.3.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

81.1%

Related for 792BC222-C5D7-11DB-9F82-000E0C2E438A