Wind River Support Network

HomeDefectsLIN7-11568

Fixed

LIN7-11568 : Security Advisory - libarchive - CVE-2019-18408

Created: Oct 27, 2019 Updated: Nov 14, 2019

Resolved Date: Nov 14, 2019

Found In Version: 7.0.0.1

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.

CREATE(Triage):(User=admin) [CVE-2019-18408|https://nvd.nist.gov/vuln/detail/CVE-2019-18408]

CVEs

CVE-2019-18408