CVE-2020-9308
Fixed in a distro release EPSS 2%
archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.
Products: libarchive, canonical ubuntu_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.11 | libarchive | 3.4.2-r0 |
| Alpine 3.12 | libarchive | 3.4.2-r0 |
| Alpine 3.13 | libarchive | 3.4.2-r0 |
| Alpine 3.14 | libarchive | 3.4.2-r0 |
| Alpine 3.15 | libarchive | 3.4.2-r0 |
| Alpine 3.16 | libarchive | 3.4.2-r0 |
| Alpine 3.17 | libarchive | 3.4.2-r0 |
| Alpine 3.18 | libarchive | 3.4.2-r0 |
| Alpine 3.19 | libarchive | 3.4.2-r0 |
| Alpine 3.20 | libarchive | 3.4.2-r0 |
| Alpine 3.21 | libarchive | 3.4.2-r0 |
| Alpine 3.22 | libarchive | 3.4.2-r0 |
| Alpine 3.23 | libarchive | 3.4.2-r0 |
| Alpine 3.24 | libarchive | 3.4.2-r0 |
| Debian 12 | libarchive | 3.4.0-2 |
| Debian 13 | libarchive | 3.4.0-2 |
| Debian 14 | libarchive | 3.4.0-2 |
| Ubuntu 16.04 LTS | libarchive | 3.1.2-11ubuntu0.16.04.8 |
| Ubuntu 18.04 LTS | libarchive | 3.2.2-3.1ubuntu0.6 |