Out-of-bounds read in libarchive (Alpine package)

1) Out-of-bounds read

EUVDB-ID: #VU15818

Risk: Low

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-14501

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to out-of-bounds read condition in the parse_file_info function, as defined in the archive_read_support_format_iso9660.c source code file when extracting ISO 9660 files. A remote attacker can trick the victim into extracting an ISO 9660 file that submits malicious input and cause the service to crash.

Mitigation

Install update from vendor's website.

Vulnerable software versions

libarchive (Alpine package): 3.3.2-r0 - 3.3.2-r3

CPE2.3

• cpe:2.3:o:alpine:libarchive_alpine_package:3.3.2-r0:*:*:*:*:alpine_linux:*:3.6
• cpe:2.3:o:alpine:libarchive_alpine_package:3.3.2-r1:*:*:*:*:alpine_linux:*:3.6
• cpe:2.3:o:alpine:libarchive_alpine_package:3.3.2-r2:*:*:*:*:alpine_linux:*:3.6

External links

https://git.alpinelinux.org/aports/commit/?id=44322cf3a8e1a8deb315160c7b52110f0847dfee
https://git.alpinelinux.org/aports/commit/?id=ca47e9328bb9d0a21d18bea8e17a078e23d8fc6c
https://git.alpinelinux.org/aports/commit/?id=e284f33911a902aeeb7e7220cde91133bcf46d43

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.