Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PAX or (2) TAR archive that triggers a buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD libarchive畸形文档处理缓冲区溢出漏洞
Vulnerability Description
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的libarchive库在处理畸形格式的TAR及PAX文件时存在漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文档控制用户系统。 FreeBSD中所捆绑的libarchive库提供灵活的接口用于读写tar和cpio之类的流文档文件，该库中用于解析tar和pax交换格式的代码中存在几个漏洞。如果pax扩展头中出现了某种破坏的话，错误的计算缓冲区长度会导致缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A