CVE-2013-0211
Fixed in a distro release EPSS 4%
Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.
Products: libarchive, canonical ubuntu_linux, opensuse, fedoraproject fedora, freebsd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libarchive | 3.0.4-3 |
| Debian 13 | libarchive | 3.0.4-3 |
| Debian 14 | libarchive | 3.0.4-3 |
| SUSE Linux Enterprise Desktop 12 | libarchive | 3.1.2-9.1 |
| SUSE Linux Enterprise Server 12 | libarchive | 3.1.2-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libarchive | 3.1.2-9.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libarchive | 3.1.2-9.1 |
| Ubuntu 14.04 LTS | libarchive | 3.1.2-7ubuntu2.1 |
| openSUSE Tumbleweed | bsdtar | 3.2.2-2.1 |