executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.6.0-1ubuntu1.2", "binary_name": "libarchive-dev" }, { "binary_version": "3.6.0-1ubuntu1.2", "binary_name": "libarchive-tools" }, { "binary_version": "3.6.0-1ubuntu1.2", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.6.0-1ubuntu1.2", "binary_name": "libarchive13" }, { "binary_version": "3.6.0-1ubuntu1.2", "binary_name": "libarchive13-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.7.4-1", "binary_name": "libarchive-dev" }, { "binary_version": "3.7.4-1", "binary_name": "libarchive-tools" }, { "binary_version": "3.7.4-1", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.7.4-1", "binary_name": "libarchive13t64" }, { "binary_version": "3.7.4-1", "binary_name": "libarchive13t64-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.7.2-2ubuntu0.2", "binary_name": "libarchive-dev" }, { "binary_version": "3.7.2-2ubuntu0.2", "binary_name": "libarchive-tools" }, { "binary_version": "3.7.2-2ubuntu0.2", "binary_name": "libarchive-tools-dbgsym" }, { "binary_version": "3.7.2-2ubuntu0.2", "binary_name": "libarchive13t64" }, { "binary_version": "3.7.2-2ubuntu0.2", "binary_name": "libarchive13t64-dbgsym" } ] }