CVE-2018-1000879

6.5MEDIUM

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c,

发布于: 12/20/2018更新于: 11/21/2024
在NVD查看在MITRE查看

描述

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.

AI分析AI驱动

受影响产品

libarchivelibarchive
fedoraprojectfedora
28
fedoraprojectfedora
29
fedoraprojectfedora
30
opensuseleap
15.0

参考资料