CVE-2024-26256 (HIGH 7.8) · Watchpost

← All vulnerabilities

CVE-2024-26256

HIGH 7.8CVE-2024-26256 · Published 09/04/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
libarchive libarchive	`< 3.7.4`	`3.7.4`

Description

Libarchive Remote Code Execution Vulnerability

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256 · Third Party Advisory
openwall.com/lists/oss-security/2024/06/04/2 · Mailing List
openwall.com/lists/oss-security/2024/06/05/1 · Mailing List
LeSuisse/nixpkgs commit 81b82a2 · Patch
libarchive/libarchive commit eb7939b · Patch
libarchive/libarchive release v3.7.4 · Release Notes
lists.fedoraproject.org/archives/list/[email protected]/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV · Mailing List
openwall.com/lists/oss-security/2024/06/04/2 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free