Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libarchive: heap-based buffer overflow in archive_string_append_from_wcs function in archive_string.c     (CVE-2020-21674)

  - libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards)     contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c,     archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the     victim must open a specially crafted archive file. (CVE-2018-1000879)

  - libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards)     contains a CWE-20: Improper Input Validation vulnerability in WARC parser -     libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run     time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a     specially crafted WARC file. (CVE-2018-1000880)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

An update of the libarchive package has been released.

ID	Name	Product	Family	Severity
198940	RHEL 8 : libarchive (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
195496	RHEL 6 : libarchive (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
195485	RHEL 7 : libarchive (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
142658	Photon OS 3.0: Libarchive PHSA-2020-3.0-0160	Nessus	PhotonOS Local Security Checks	medium
142652	Photon OS 2.0: Libarchive PHSA-2020-2.0-0294	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2020-21674

medium

Tenable Plugins

medium

critical

critical

medium

medium