CVE-2024-26256

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256 · Third Party Advisory
• openwall.com/lists/oss-security/2024/06/04/2 · Mailing List
• openwall.com/lists/oss-security/2024/06/05/1 · Mailing List
• LeSuisse/nixpkgs commit 81b82a2 · Patch
• libarchive/libarchive commit eb7939b · Patch
• libarchive/libarchive release v3.7.4 · Release Notes
• lists.fedoraproject.org/archives/list/[email protected]/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV · Mailing List
• openwall.com/lists/oss-security/2024/06/04/2 · Mailing List

Mais vulnerabilidades de libarchive

• CVE-2025-60753MÉDIO 5.5An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted…
• CVE-2025-5918MÉDIO 6.6A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potential…
• CVE-2025-5917MÉDIO 5.0A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and …
• CVE-2025-5916MÉDIO 5.6A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing …
• CVE-2025-5915MÉDIO 6.6A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter blo…