| Package | Affected versions | Patched versions |
|---|---|---|
| libarchive | = 3.4.0 |
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free