Wind River Support Network

HomeDefectsLIN1018-5321
Fixed

LIN1018-5321 : Security Advisory - libarchive - CVE-2019-19221

Created: Nov 21, 2019    Updated: Dec 10, 2019
Resolved Date: Nov 29, 2019
Found In Version: 10.18.44.1
Fix Version: 10.18.44.13
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

CREATE(Triage):(User=admin) [CVE-2019-19221|https://nvd.nist.gov/vuln/detail/CVE-2019-19221]

CVEs


Live chat
Online