Out-of-Bounds Access Vulnerability in libarchive - CVE-2024-48958
Summary
ALPINE-CVE-2024-48958: execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. Affects libarchive versions < 3.7.5-r0. Fixed in 3.7.5-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libarchive is a widely used library that provides a flexible and efficient way to read and write various archive formats, including ZIP, TAR, and RAR. It is designed to facilitate the handling of compressed files and archives in software applications. However, certain versions of libarchive are vulnerable to an out-of-bounds access issue, which can lead to severe security risks if exploited.
Vulnerability Detail
The vulnerability identified as CVE-2024-48958 arises from the execute_filter_delta function in the archive_read_support_format_rar.c file of libarchive. This flaw allows for out-of-bounds access when processing a specially crafted archive file. The src pointer can move beyond the allocated dst buffer, potentially leading to data corruption, crashes, or arbitrary code execution. The vulnerability affects versions of libarchive prior to 3.7.5, with a CVSS score of 7.8, indicating a high severity level.
How To Fix
Minimum fixed version
3.7.5-r0
This is the first release that contains the fix.
sudo apk add --upgrade libarchiveTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability other than updating to the fixed version. Users are advised to monitor their systems and apply the necessary updates as soon as possible.
Conclusion
CVE-2024-48958 represents a significant security vulnerability in the libarchive library, allowing for out-of-bounds access that can lead to severe consequences. Users are strongly encouraged to update to the latest patched version to safeguard their applications.
See every vulnerability recorded for libarchive →
FAQ
CVE-2024-48958 is a vulnerability in the libarchive library that allows for out-of-bounds access due to improper handling of crafted archive files.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Exploitation of this vulnerability can lead to data corruption, application crashes, or even arbitrary code execution, posing significant security risks.
Yes, a patch is available in version 3.7.5-r0 of libarchive. Users should update to this version to mitigate the risk.
The CVSS score for CVE-2024-48958 is 7.8, indicating a high level of severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for libarchive.
