CVE-2018-1000878: Use After Free
A use-after-free vulnerability was found in libarchive in RAR decoder. A crafted archive could cause the application to crash.
Upstream issue:
https://github.com/libarchive/libarchive/pull/1105
Upstream patch:
https://github.com/libarchive/libarchive/commit/bfcfe6f04ed20db2504db8a254d1f40a1d84eb28
Other sources
CVE-2018-1000877 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes(), realloc(rar->lzss.window, newsize) with newsize = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive. CVE-2018-1000878 libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
— F5
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-1000878?
CVE-2018-1000878 is a vulnerability in libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards that can result in Crash/DoS.
How severe is CVE-2018-1000878?
CVE-2018-1000878 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2018-1000878?
CVE-2018-1000878 affects libarchive versions 3.1.0 to 3.4.0.
How can I fix CVE-2018-1000878?
To fix CVE-2018-1000878, update libarchive to version 3.1.2-7ubuntu2.7 (for Ubuntu Trusty), 3.1.2-11ubuntu0.16.04.5 (for Ubuntu Xenial), 3.2.2-3.1ubuntu0.2 (for Ubuntu Bionic), or 3.2.2-5ubuntu0.1 (for Ubuntu Cosmic).
What is CWE-416?
CWE-416 is a vulnerability that refers to Use After Free.