CVE-2026-17591
Fixed in a distro release EPSS <1%CVSS 3.6
A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.
Products: Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libarchive | no fix |
| Debian 13 | libarchive | no fix |
| Debian 14 | libarchive | 3.8.9-1 |
| Red Hat hummingbird 1 | bsdcat | 0:3.8.9-2.1.hum1 |
| Red Hat hummingbird 1 | bsdcpio | 0:3.8.9-2.1.hum1 |
| Red Hat hummingbird 1 | bsdtar | 0:3.8.9-2.1.hum1 |
| Red Hat hummingbird 1 | bsdunzip | 0:3.8.9-2.1.hum1 |
| Red Hat hummingbird 1 | libarchive | 0:3.8.9-2.1.hum1 |
| Red Hat hummingbird 1 | libarchive-devel | 0:3.8.9-2.1.hum1 |
| Ubuntu 22.04 LTS | libarchive | no fix |
| Ubuntu 24.04 LTS | libarchive | no fix |
| Ubuntu 26.04 LTS | libarchive | no fix |
| Ubuntu Pro 14.04 LTS | libarchive | no fix |
| Ubuntu Pro 16.04 LTS | libarchive | no fix |
| Ubuntu Pro 18.04 LTS | libarchive | no fix |
| Ubuntu Pro 20.04 LTS | libarchive | no fix |