Vulnerability Monitor

Type: Secondary CWE-122
Type: Primary CWE-787

The vendors, products, and vulnerabilities you care about

CVE-2024-26256

Libarchive Remote Code Execution Vulnerability

2024-04-09T17:15:47.507

2025-01-08T16:03:05.373

Analyzed

CVSSv3.1: 7.8 (HIGH)

Type	Vendor	Product	Version/Range	Vulnerable?
Application	libarchive	libarchive	< 3.7.4	Yes
Operating System	fedoraproject	fedora	39	Yes
Operating System	fedoraproject	fedora	40	Yes
Operating System	microsoft	windows_11_22h2	< 10.0.22621.3447	Yes
Operating System	microsoft	windows_11_23h2	< 10.0.22631.3447	Yes
Operating System	microsoft	windows_server_2022_23h2	< 10.0.25398.830	Yes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256 Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2024/06/04/2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/06/05/1 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/libarchive/libarchive/releases/tag/v3.7.4 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openwall.com/lists/oss-security/2024/06/04/2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)