CVE-2007-3644: Medium severity FreeBSD Libarchive vulnerability
archivereadsupportformattar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (infinite loop) via (1) an end-of-file condition within a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3644?
CVE-2007-3644 is classified as a denial of service vulnerability that can lead to an infinite loop condition in the affected software.
How do I fix CVE-2007-3644?
The recommended fix for CVE-2007-3644 is to upgrade libarchive to version 2.2.4 or later.
Which versions of libarchive are affected by CVE-2007-3644?
CVE-2007-3644 affects libarchive versions prior to 2.2.4, specifically 2.2.3 and earlier.
What types of archives are vulnerable in CVE-2007-3644?
CVE-2007-3644 affects TAR and PAX archive formats due to issues in processing malformed headers.
What can attackers exploit with CVE-2007-3644?
Attackers can exploit CVE-2007-3644 via specially crafted TAR or PAX archives that trigger a denial of service condition.