USN-6805-1: libarchive vulnerability
Published Jun 4, 2024
·Updated
It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to execute arbitrary code or cause a crash.
Affected Software
6 affected componentsFixes available
All of the following
ubuntu/libarchive13t64<3.7.2-2ubuntu0.1
3.7.2-2ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libarchive13<3.6.2-1ubuntu1.1
3.6.2-1ubuntu1.1
Ubuntu Ubuntu=23.10
All of the following
ubuntu/libarchive13<3.6.0-1ubuntu1.1
3.6.0-1ubuntu1.1
Ubuntu Ubuntu=22.04
Event History
Jun 4, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6805-1?
The severity of USN-6805-1 is considered high due to the potential for arbitrary code execution or crashes.
2
How do I fix USN-6805-1?
To fix USN-6805-1, you should upgrade to the latest patched version of libarchive as specified in the advisory for your Ubuntu version.
3
What versions of Ubuntu are affected by USN-6805-1?
USN-6805-1 affects Ubuntu versions 22.04, 23.10, and 24.04 with specific versions of libarchive.
4
What kind of attack can be executed through USN-6805-1?
An attacker can exploit USN-6805-1 to execute arbitrary code or cause a denial of service by crashing the application.
5
Where can I find more information about USN-6805-1?
You can find more information about USN-6805-1 in the Ubuntu security notices section.