CVE:CVE-2019-1000019
CNNVD:CNNVD-201902-041
libarchive是一款多格式存档和压缩库。
libarchive 3.2.0及之前版本中的archive_read_support_format_7zip.c文件中的‘header_bytes’函数存在越界读取漏洞。远程攻击者可借助特制的7zip文件利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade libarchive libarchive to a higher version than 3.4.0,and avoid the version [3.0.2,3.4.0); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade fedoraproject fedora to a higher version than 28,29,and avoid the version 28,29; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0