Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libarchive 缓冲区错误漏洞
Vulnerability Description
libarchive是一款多格式存档和压缩库。 libarchive-3.4.1dev 版本存在缓冲区错误漏洞，该漏洞源于archive_string_append_from_wcs() (archive_string.c)附加的归档字符串中基于堆的缓冲区溢出，攻击者可利用该漏洞导致拒绝服务(堆内存中写值超出范围导致崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A