CVE-2024-26256

Libarchive Remote Code Execution Vulnerability
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

History

08 Jan 2025, 16:03

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : unknown
CWE CWE-787
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV/ - Mailing List
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC/ - Mailing List
  • () http://www.openwall.com/lists/oss-security/2024/06/05/1 - Mailing List
  • () https://www.openwall.com/lists/oss-security/2024/06/04/2 - Mailing List
  • () https://github.com/LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262 - Patch
  • () https://github.com/libarchive/libarchive/releases/tag/v3.7.4 - Release Notes
  • () https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch - Patch
  • () http://www.openwall.com/lists/oss-security/2024/06/04/2 - Mailing List
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256 - Third Party Advisory
CPE cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
Summary libarchive Remote Code Execution Vulnerability Libarchive Remote Code Execution Vulnerability
First Time Microsoft windows Server 2022 23h2
Fedoraproject
Fedoraproject fedora
Libarchive
Microsoft windows 11 22h2
Microsoft
Libarchive libarchive
Microsoft windows 11 23h2

09 Oct 2024, 02:15

Type Values Removed Values Added
References
  • {'url': 'https://www.openwall.com/lists/oss-security/2024/06/04/2', 'name': 'https://www.openwall.com/lists/oss-security/2024/06/04/2', 'tags': [], 'refsource': ''}
  • {'url': 'https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch', 'name': 'https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch', 'tags': [], 'refsource': ''}
  • {'url': 'https://github.com/LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262', 'name': 'https://github.com/LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262', 'tags': [], 'refsource': ''}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV/', 'name': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV/', 'tags': [], 'refsource': ''}
  • {'url': 'https://github.com/libarchive/libarchive/releases/tag/v3.7.4', 'name': 'https://github.com/libarchive/libarchive/releases/tag/v3.7.4', 'tags': [], 'refsource': ''}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC/', 'name': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC/', 'tags': [], 'refsource': ''}
  • {'url': 'http://www.openwall.com/lists/oss-security/2024/06/04/2', 'name': 'http://www.openwall.com/lists/oss-security/2024/06/04/2', 'tags': [], 'refsource': ''}
  • {'url': 'http://www.openwall.com/lists/oss-security/2024/06/05/1', 'name': 'http://www.openwall.com/lists/oss-security/2024/06/05/1', 'tags': [], 'refsource': ''}

12 Jun 2024, 02:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV/ -

10 Jun 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/06/04/2 -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC/ -

10 Jun 2024, 17:16

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/06/05/1 -

08 Jun 2024, 13:15

Type Values Removed Values Added
References
  • () https://www.openwall.com/lists/oss-security/2024/06/04/2 -
  • () https://github.com/libarchive/libarchive/releases/tag/v3.7.4 -
  • () https://github.com/LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262 -
  • () https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch -

09 Apr 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-09 17:15

Updated : 2025-01-08 16:03


NVD link : CVE-2024-26256

Mitre link : CVE-2024-26256


JSON object : View

Products Affected

microsoft

  • windows_11_22h2
  • windows_server_2022_23h2
  • windows_11_23h2

fedoraproject

  • fedora

libarchive

  • libarchive
CWE
CWE-787

Out-of-bounds Write