CVE-2026-4424

libarchive, redhat hardened images, redhat openshift container platform +4 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-4424

Katalog CVE

CVSS 7.5 · High EPSS 1,1%

Kerentanan Out-of-bounds Read pada libarchive, redhat hardened images +5 lainnya. Skor CVSS 3.1 7.5 (High) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.

Rincian

Terbit di NVD
19 Maret 2026
Terakhir diubah
14 Oktober 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-125: Out-of-bounds Read
EPSS (30 hari)
1,1% peluang dieksploitasi; lebih tinggi dari 64,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
libarchive libarchive Semua versi
redhat hardened images Semua versi
redhat openshift container platform Versi 4.0
redhat openshift container platform Versi 4.16
redhat openshift container platform for arm64 Versi 4.16
redhat openshift container platform for power Versi 4.16
redhat enterprise linux Versi 6.0
redhat enterprise linux Versi 7.0
redhat enterprise linux Versi 8.0
redhat enterprise linux Versi 9.0
redhat enterprise linux Versi 10.0
redhat enterprise linux server aus Versi 8.2
redhat enterprise linux server aus Versi 8.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 14 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.