Lucene search

K
freebsdFreeBSD7C63775E-BE31-11E5-B5FE-002590263BF5
HistoryDec 06, 2012 - 12:00 a.m.

libarchive -- multiple vulnerabilities

2012-12-0600:00:00
vuxml.freebsd.org
17

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.011

Percentile

84.8%

MITRE reports:

Integer signedness error in the archive_write_zip_data function in
archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when
running on 64-bit machines, allows context-dependent attackers to
cause a denial of service (crash) via unspecified vectors, which
triggers an improper conversion between unsigned and signed types,
leading to a buffer overflow.

Absolute path traversal vulnerability in bsdcpio in libarchive
3.1.2 and earlier allows remote attackers to write to arbitrary
files via a full pathname in an archive.

Libarchive issue tracker reports:

Using a crafted tar file bsdtar can perform an out-of-bounds memory
read which will lead to a SEGFAULT. The issue exists when the
executable skips data in the archive. The amount of data to skip is
defined in byte offset [16-19] If ASLR is disabled, the issue can
lead to an infinite loop.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibarchive< 3.1.2_5,1UNKNOWN
FreeBSDanynoarchfreebsd= 10.3UNKNOWN
FreeBSDanynoarchfreebsd< 10.3_4UNKNOWN

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.011

Percentile

84.8%