İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 7.5

CVE-2026-4424: Libarchive: sınır dışı okuma

Yayın: · Güncelleme:

Açıklama (NVD)

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.

Özet bilgiler

Ürün
Libarchive Libarchive
CVSS v3.1
7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
%1,29 (yüzdelik 70)
CWE
CWE-125
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
libarchive-libarchive———
redhat-hardened-images———
redhat-openshift-container-platform4.04.0—
redhat-openshift-container-platform4.164.16—
redhat-openshift-container-platform-for-arm644.164.16—
redhat-openshift-container-platform-for-power4.164.16—
redhat-enterprise-linux6.06.0—
redhat-enterprise-linux7.07.0—
redhat-enterprise-linux8.08.0—
redhat-enterprise-linux9.09.0—
redhat-enterprise-linux10.010.0—
redhat-enterprise-linux-server-aus8.28.2—
redhat-enterprise-linux-server-aus8.48.4—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları