CVE-2024-48957: High severity Libarchive libarchive vulnerability
Published Oct 10, 2024
·Updated
executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
Affected Software
1 affected component
Libarchive libarchive>=3.6.0<3.7.5
Remediation
Patch Available
Event History
Oct 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-48957?
CVE-2024-48957 has a medium severity level due to the potential for out-of-bounds access.
2
How do I fix CVE-2024-48957?
To mitigate CVE-2024-48957, upgrade to libarchive version 3.7.5 or later.
3
What types of applications are affected by CVE-2024-48957?
CVE-2024-48957 affects applications that utilize libarchive versions prior to 3.7.5 for processing RAR archive files.
4
Can CVE-2024-48957 be exploited remotely?
Yes, CVE-2024-48957 can potentially be exploited by an attacker through a crafted archive file.
5
What specific function is involved in CVE-2024-48957?
CVE-2024-48957 is associated with the execute_filter_audio function in archive_read_support_format_rar.c in libarchive.