Ubuntu.comUB:CVE-2021-36976CVE-2021-36976
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.005 Low
EPSS
Percentile
77.3%
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called
from do_uncompress_block and process_block).
Bugs
- <https://github.com/libarchive/libarchive/issues/1554>
- <https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375>
- <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991442>
Notes
| Author | Note |
|---|---|
| mdeslaur | introduced by: https://github.com/libarchive/libarchive/commit/47bb8187d3ef2d49ee8c7841cb2872b3cfa1f6f7 this was backported by the upstream-rar-window-mask.patch patch in focal |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | libarchive | < 3.4.0-2ubuntu1.1 | UNKNOWN |
| ubuntu | 21.10 | noarch | libarchive | < 3.4.3-2ubuntu0.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | libarchive | < 3.5.2-1ubuntu1 | UNKNOWN |
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.005 Low
EPSS
Percentile
77.3%