CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.5%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2018-1000879

Libarchive » Libarchive » Version: 3.3.0

cpe:2.3:a:libarchive:libarchive:3.3.0
Libarchive » Libarchive » Version: 3.3.1

cpe:2.3:a:libarchive:libarchive:3.3.1
Libarchive » Libarchive » Version: 3.3.2

cpe:2.3:a:libarchive:libarchive:3.3.2
Libarchive » Libarchive » Version: 3.3.3

cpe:2.3:a:libarchive:libarchive:3.3.3
Fedoraproject » Fedora » Version: 28

cpe:2.3:o:fedoraproject:fedora:28
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000879

Products

Pricing

Contact Us