5
CVSSv2

CVE-2019-18408

Published: 24/10/2019 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive prior to 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libarchive libarchive

debian debian linux 8.0

canonical ubuntu linux 16.04

canonical ubuntu linux 18.04

canonical ubuntu linux 19.04

canonical ubuntu linux 14.04

Vendor Advisories

libarchive could be made to execute arbitrary code if it received specially crafted archive file ...
A use-after-free was found in libarchive, a multi-format archive and compression library, which could result in denial of service and potentially the execution of arbitrary code is a malformed archive is processed For the oldstable distribution (stretch), this problem has been fixed in version 322-2+deb9u2 For the stable distribution (buster), ...
Synopsis Important: libarchive security update Type/Severity Security Advisory: Important Topic An update for libarchive is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base ...
Synopsis Important: libarchive security update Type/Severity Security Advisory: Important Topic An update for libarchive is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base ...
Synopsis Important: libarchive security update Type/Severity Security Advisory: Important Topic An update for libarchive is now available for Red Hat Enterprise Linux 80 Update Services for SAP SolutionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulne ...
Synopsis Moderate: Red Hat CodeReady Workspaces 210 release Type/Severity Security Advisory: Moderate Topic Red Hat CodeReady Workspaces 210 has been releasedRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, ...
Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...
archive_read_format_rar_read_data in archive_read_support_format_rarc in libarchive before 340 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol (CVE-2019-18408) ...
archive_read_format_rar_read_data in archive_read_support_format_rarc in libarchive before 340 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol (CVE-2019-18408) ...