Lucene search
PRIOn knowledge basePRION:CVE-2020-9308HistoryFeb 20, 2020 - 7:15 a.m.
Remote file inclusion
2020-02-2007:15:00
PRIOn knowledge base
www.prio-n.com
4
archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 19.10 | |
| ubuntu_linux | eq | 16.04 | |
| fedora | eq | 31 | |
| fedora | eq | 32 | |
| libarchive | ge | 3.4.0 | |
| libarchive | lt | 3.4.2 |
References
bugs.chromium.org/p/oss-fuzz/issues/detail?id=20459
github.com/libarchive/libarchive/pull/1326
github.com/libarchive/libarchive/pull/1326/commits/94821008d6eea81e315c5881cdf739202961040a
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6OTE7GWASH2ZOVG5H3HEN5PR6B3KF7JB/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J76F7VU7HC3GBKG5SAKTRBOFOI3RGO6M/
security.gentoo.org/glsa/202003-28
usn.ubuntu.com/4293-1/
Related
redhatcve
redhatcve
CVE-2020-9308
2020-02-21 19:40:45
cvelist
cvelist
CVE-2020-9308
2020-02-20 06:07:23
cve
cve
CVE-2020-9308
2020-02-20 07:15:12
osv
osv
CVE-2020-9308
2020-02-20 07:15:12
nvd
nvd
CVE-2020-9308
2020-02-20 07:15:12
veracode
veracode
Arbitrary Code Execution
2020-08-06 21:33:29
alpinelinux
alpinelinux
CVE-2020-9308
2020-02-20 07:15:12
ubuntucve
ubuntucve
CVE-2020-9308
2020-02-20 00:00:00
debiancve
debiancve
CVE-2020-9308
2020-02-20 07:15:12
openvas
openvas
Ubuntu: Security Advisory (USN-4293-1)
2020-03-03 00:00:00
Fedora: Security Advisory for libarchive (FEDORA-2020-d8278fe24d)
2020-06-08 00:00:00
Mageia: Security Advisory (MGASA-2020-0127)
2022-01-28 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-4293-1)
2020-03-06 00:00:00
Fedora 32 : libarchive (2020-94211d0a7d)
2020-06-04 00:00:00
GLSA-202003-28 : libarchive: Multiple vulnerabilities
2020-03-16 00:00:00
mageia
mageia
Updated libarchive packages fix security vulnerabilities
2020-03-06 19:13:58
gentoo
gentoo
libarchive: Multiple vulnerabilities
2020-03-15 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: libarchive-3.4.3-1.fc32
2020-05-26 03:15:28
[SECURITY] Fedora 31 Update: libarchive-3.4.3-1.fc31
2020-06-07 19:47:20
ubuntu
ubuntu
libarchive vulnerabilities
2020-03-02 00:00:00
cloudfoundry
cloudfoundry
USN-4293-1: libarchive vulnerabilities | Cloud Foundry
2020-03-10 00:00:00