In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 libarchive

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]

Debian:13 libarchive

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]

Debian:14 libarchive

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]

参照URL

advisory security-tracker.debian.org