CVE-2024-26256: libarchive libarchive – CVSS 7.8 · Watchpost

← All vulnerabilities

CVE-2024-26256

ALTO 7.8CVE-2024-26256 · Published 09/04/2024 · updated 17/06/2026

In breve

CVE-2024-26256 è una vulnerabilità ALTO (CVSS 7.8) che riguarda libarchive (libarchive).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 87.9%, superiore al 99.8% delle vulnerabilità.
Correzione: aggiornare a 3.7.4 o successiva.

Package	Affected versions	Patched versions
libarchive libarchive	`< 3.7.4`	`3.7.4`

Description

Libarchive Remote Code Execution Vulnerability

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256 · Third Party Advisory
openwall.com/lists/oss-security/2024/06/04/2 · Mailing List
openwall.com/lists/oss-security/2024/06/05/1 · Mailing List
LeSuisse/nixpkgs commit 81b82a2 · Patch
libarchive/libarchive commit eb7939b · Patch
libarchive/libarchive release v3.7.4 · Release Notes
lists.fedoraproject.org/archives/list/[email protected]/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV · Mailing List
openwall.com/lists/oss-security/2024/06/04/2 · Mailing List

Altre vulnerabilità di libarchive

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free