Wind River Support Network

HomeDefectsLIN10-10064

Fixed

LIN10-10064 : Security Advisory - libarchive - CVE-2022-28066

Created: May 4, 2022 Updated: May 27, 2022

Resolved Date: May 27, 2022

Found In Version: 10.17.41.1

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

Libarchive v3.6.0 was discovered to contain a read memory access vulnerability via the function lzma_decode.

CREATE(Triage):(User=admin) CVE-2022-28066 (https://nvd.nist.gov/vuln/detail/CVE-2022-28066)