CVE-2011-1778: Buffer Overflow
Published Apr 13, 2012
·Updated
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive.
Affected Software
18 affected components
FreeBSD Libarchive=2.8.0
FreeBSD Libarchive=2.6.2
FreeBSD Libarchive=2.7.0
FreeBSD Libarchive=2.4
FreeBSD Libarchive=2.1
FreeBSD Libarchive=2.8.3
FreeBSD Libarchive=2.2
FreeBSD Libarchive=2.3
FreeBSD Libarchive<=2.8.5
FreeBSD Libarchive=2.5
FreeBSD Libarchive=2.2.3
FreeBSD Libarchive=2.8.2
FreeBSD Libarchive=2.6
FreeBSD Libarchive=2.0
FreeBSD Libarchive=2.8.4
FreeBSD Libarchive=2.6.1
FreeBSD Libarchive=2.8.1
FreeBSD Libarchive=2.7.1
Event History
Apr 13, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1778?
CVE-2011-1778 has a moderate severity level due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2011-1778?
To fix CVE-2011-1778, update the libarchive package to version 2.8.6 or later.
3
Which versions of libarchive are affected by CVE-2011-1778?
CVE-2011-1778 affects libarchive versions up to and including 2.8.5.
4
What type of vulnerability is CVE-2011-1778?
CVE-2011-1778 is a buffer overflow vulnerability.
5
Can CVE-2011-1778 allow for remote attacks?
Yes, CVE-2011-1778 can allow remote attackers to execute arbitrary code through crafted TAR archives.