Bug 2290445 (CVE-2024-20697)

Summary:	CVE-2024-20697 libarchive: Heap based buffer overflow in rar e8 filter
Product:	[Other] Security Response	Reporter:	Marco Benatto <mbenatto>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	agarcial, aoconnor, aprice, asegurap, bdettelb, caswilli, dfreiber, dhalasz, dkuc, drow, fjansen, hkataria, jburrell, jmitchel, jsamir, jsherril, jtanner, kaycoth, kholdawa, kshier, ljavorsk, luizcosta, mpierce, nweather, oezr, orabin, psegedy, stcannon, sthirugn, vkrizan, vkumar, vmugicag, xiaoxwan, yguenane, zzhou
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in the libarchive library. A heap-based buffer overflow in the execute_filter_e8 function in the libarchive/archive_read_support_format_rar.c file can be triggered when a specially crafted RAR archive is processed, causing a crash to the application linked to the library and resulting in a denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-06-12 17:37:37 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2282521, 2290446
Bug Blocks:	2290447

Description Marco Benatto 2024-06-04 20:15:21 UTC

Windows Libarchive Remote Code Execution Vulnerability.

References:
https://github.com/libarchive/libarchive/pull/2135
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697
https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability

Comment 1 Marco Benatto 2024-06-04 20:16:41 UTC

Created libarchive tracking bugs for this issue:

Affects: fedora-all [bug 2290446]