SB2019080634 - Red Hat update for libarchive
Published: August 6, 2019 Updated: August 6, 2019
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Out-of-bounds read (CVE-ID: CVE-2017-14503)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The vulnerability exists due to out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive. A remote attacker can trigger an out-of-bounds read, related to lha_crc16 and cause the service to crash.
2) Double-free error (CVE-ID: CVE-2018-1000877)
The vulnerability allows a remote attacker to cause DoS condition.
The vulnerability exists due to double-free error in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0. A remote attacker can trick the victim into opening a specially crafted RAR archive and cause the service to crash.
3) Use-after-free error (CVE-ID: CVE-2018-1000878)
The vulnerability allows a remote attacker to cause DoS condition.
The vulnerability exists due to use-after-free error in RAR decoder - libarchive/archive_read_support_format_rar.c. A remote attacker can trick the victim into opening a specially crafted RAR archive and cause the service to crash.
4) Out-of-bounds read (CVE-ID: CVE-2019-1000019)
The vulnerability allows a remote attacker to perform denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the header_bytes() function in archive_read_support_format_7zip.c when decompressing 7zip archives. A remote attacker can create a specially crafted 7zip file, trick the victim into opening it, trigger out-of-bounds read error and crash the affected application.
5) Resource exhaustion (CVE-ID: CVE-2019-1000020)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper parsing of ISO9660 files. A remote attacker can persuade a user to access an ISO9660, trigger an infinite loop condition and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.