PT-2024-1124 · Microsoft +4 · Windows +4

🗓️ 09 Jan 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

libarchive heap-based out-of-bounds write allows remote code execution via crafted RAR archives on Windows.

Reporter	Title	Published	Views	Family All 591
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU Binutils, Bootstrap, PortSmash, Node.js, and libarchive might affect IBM Storage Defender – Data Protect.	18 Oct 202401:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	19 Jun 202517:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	8 Aug 202417:29	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to out of bounds memory access due to the libarchive package (CVE-2024-37407)	2 Sep 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl-libs, libssh, libarchive, sqlite and go-toolset	1 Aug 202306:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in libarchive (CVE-2022-36227)	27 Jul 202317:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	12 Sep 202319:10	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package libarchive version 3.6.0-alt2	26 Oct 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package libarchive version 3.6.1-alt2	12 Dec 202200:00	–	altlinux

Source	Link
github	www.github.com/clearbluejar/CVE-2024-20696
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-20696
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/711986
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-20696
osv	www.osv.dev/vulnerability/SUSE-SU-2024:2081-1
osv	www.osv.dev/vulnerability/SUSE-SU-2024:2171-2
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/SUSE-SU-2024:2082-1
msrc	www.msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-20696
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

18 Jan 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.3 - 9.8

CVSS 25.8

EPSS0.87896

SSVC