CVE-2017-14503

MEDIUM

Description

libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.

References

https://access.redhat.com/errata/RHSA-2019:2298

https://bugs.debian.org/875960

https://github.com/libarchive/libarchive/issues/948

https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html

https://security.gentoo.org/glsa/201908-11

https://usn.ubuntu.com/3736-1/

https://www.debian.org/security/2018/dsa-4360

Details

Source: MITRE

Published: 2017-09-17

Updated: 2018-12-28

Type: CWE-125

Risk Information

CVSS v2.0

Base Score: 4.3

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3.0

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 2.8

Severity: MEDIUM

Tenable Plugins

View all (24 total)

ID	Name	Product	Family	Severity
135650	EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-1488)	Nessus	Huawei Local Security Checks	medium
134515	EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2020-1226)	Nessus	Huawei Local Security Checks	medium
132509	NewStart CGSL CORE 5.05 / MAIN 5.05 : libarchive Multiple Vulnerabilities (NS-SA-2019-0248)	Nessus	NewStart CGSL Local Security Checks	medium
132139	EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2019-2604)	Nessus	Huawei Local Security Checks	medium
131871	EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2019-2379)	Nessus	Huawei Local Security Checks	medium
131487	EulerOS Virtualization for ARM 64 3.0.3.0 : libarchive (EulerOS-SA-2019-2322)	Nessus	Huawei Local Security Checks	medium
130664	EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2019-2202)	Nessus	Huawei Local Security Checks	medium
130565	RHEL 8 : libarchive (RHSA-2019:3698)	Nessus	Red Hat Local Security Checks	medium
130222	Amazon Linux 2 : libarchive (ALAS-2019-1325)	Nessus	Amazon Linux Local Security Checks	medium
129902	NewStart CGSL CORE 5.04 / MAIN 5.04 : libarchive Multiple Vulnerabilities (NS-SA-2019-0201)	Nessus	NewStart CGSL Local Security Checks	medium
129798	Amazon Linux AMI : libarchive (ALAS-2019-1308)	Nessus	Amazon Linux Local Security Checks	medium
128387	CentOS 7 : libarchive (CESA-2019:2298)	Nessus	CentOS Local Security Checks	medium
128228	Scientific Linux Security Update : libarchive on SL7.x x86_64 (20190806)	Nessus	Scientific Linux Local Security Checks	medium
127960	GLSA-201908-11 : libarchive: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
127709	RHEL 7 : libarchive (RHSA-2019:2298)	Nessus	Red Hat Local Security Checks	medium
123365	openSUSE Security Update : libarchive (openSUSE-2019-888)	Nessus	SuSE Local Security Checks	medium
120150	SUSE SLED15 / SLES15 Security Update : libarchive (SUSE-SU-2018:3571-1)	Nessus	SuSE Local Security Checks	medium
119893	Debian DSA-4360-1 : libarchive - security update	Nessus	Debian Local Security Checks	medium
119552	SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2018:3640-2)	Nessus	SuSE Local Security Checks	medium
119289	Debian DLA-1600-1 : libarchive security update	Nessus	Debian Local Security Checks	medium
118872	openSUSE Security Update : libarchive (openSUSE-2018-1366)	Nessus	SuSE Local Security Checks	medium
118871	openSUSE Security Update : libarchive (openSUSE-2018-1365)	Nessus	SuSE Local Security Checks	medium
118819	SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2018:3640-1)	Nessus	SuSE Local Security Checks	medium
111672	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-3736-1)	Nessus	Ubuntu Local Security Checks	medium