CVE-2020-21674

Katalog CVE

CVSS 6.5 · Medium EPSS 2,1%

Kerentanan Out-of-bounds Write pada libarchive. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

Rincian

Terbit di NVD

15 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 81,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/libarchive/libarchive/commit/4f085eea879e2be745f4d9bf57e8513ae48157f4 patch · advisory pihak ketiga
• https://github.com/libarchive/libarchive/issues/1298 advisory pihak ketiga