Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in
    function header_pax_extension at rchive_read_support_format_tar.c:1844:8. (CVE-2024-48615)

The version of cmake / libarchive installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48615 advisory.

  - Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in     function header_pax_extension at rchive_read_support_format_tar.c:1844:8. (CVE-2024-48615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of cmake / libarchive installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48615 advisory.

  - Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in     function header_pax_extension at rchive_read_support_format_tar.c:1844:8. (CVE-2024-48615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
452320	Google: app-arch/libarchive: security update to 19000.0.0	Tenable Cloud Security	Google COS Security Checks	Local	high
452320	Google: app-arch/libarchive: security update to 19000.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
451807	Google: app-arch/libarchive: security update to 18244.291.109	Tenable Cloud Security	Google COS Security Checks	Local	high
451807	Google: app-arch/libarchive: security update to 18244.291.109	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
234306	Azure Linux 3.0 Security Update: cmake / libarchive (CVE-2024-48615)	Nessus	Azure Linux Local Security Checks	Local	high
234066	CBL Mariner 2.0 Security Update: cmake / libarchive (CVE-2024-48615)	Nessus	MarinerOS Local Security Checks	Local	high

Detections

Analytics

CVE-2024-48615

high

Tenable Plugins

high

high

high

high

high

high