Unscored severity · published Apr 13, 2012
CVE-2011-1778
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive
–
CVSS
4.2%
EPSS
No
On KEV
Description
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libarchive · Freebsd
through 2.8.5; 2.0; 2.1; 2.2; 2.2.3; 2.3; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1778
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1778
code.google.com
http://code.google.com/p/libarchive/source/detail?r=3160
lists.apple.com
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
secunia.com
http://secunia.com/advisories/48034
support.apple.com
http://support.apple.com/kb/HT5281
www.debian.org
http://www.debian.org/security/2012/dsa-2413
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=705849
More from Libarchive
–
CVE-2011-1779
Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other…
–
CVE-2011-1777
Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to…
–
CVE-2010-4666
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted…
–
CVE-2007-3645
archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a…
–
CVE-2007-3641
archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which…