CVE-2018-1000878: Use After Free
A use-after-free vulnerability was found in libarchive in RAR decoder. A crafted archive could cause the application to crash.
Upstream issue:
https://github.com/libarchive/libarchive/pull/1105
Upstream patch:
https://github.com/libarchive/libarchive/commit/bfcfe6f04ed20db2504db8a254d1f40a1d84eb28
Other sources
CVE-2018-1000877 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes(), realloc(rar->lzss.window, newsize) with newsize = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive. CVE-2018-1000878 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
— F5
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
F5 BIG-IP and BIG-IQ Centralized Managementto a version that resolves this vulnerability.Fixed in 17.5.017.1.2.2 - Upgrade
Upgrade
F5 BIG-IP and BIG-IQ Centralized Managementto a version that resolves this vulnerability.Fixed in 16.1.6 - Upgrade
Upgrade
F5 BIG-IP and BIG-IQ Centralized Managementto a version that resolves this vulnerability.Fixed in 8.4.0 - Upgrade
Upgrade
debian/libarchiveto a version that resolves this vulnerability.Fixed in 3.6.2-1+deb12u4Fixed in 3.6.2-1+deb12u5Fixed in 3.7.4-4+deb13u1Fixed in 3.8.9-1
Event History
Frequently Asked Questions
What is CVE-2018-1000878?
CVE-2018-1000878 is a vulnerability in libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards that can result in Crash/DoS.
How severe is CVE-2018-1000878?
CVE-2018-1000878 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2018-1000878?
CVE-2018-1000878 affects libarchive versions 3.1.0 to 3.4.0.
How can I fix CVE-2018-1000878?
To fix CVE-2018-1000878, update libarchive to version 3.1.2-7ubuntu2.7 (for Ubuntu Trusty), 3.1.2-11ubuntu0.16.04.5 (for Ubuntu Xenial), 3.2.2-3.1ubuntu0.2 (for Ubuntu Bionic), or 3.2.2-5ubuntu0.1 (for Ubuntu Cosmic).
What is CWE-416?
CWE-416 is a vulnerability that refers to Use After Free.