CVE:CVE-2018-1000877
CNNVD:CNNVD-201812-942
libarchive是一个多格式存档和压缩库。
libarchive commit 416694915449219d505531b1096384f3237dd6cc及之后版本（3.1.0及之后版本）中的libarchive/archive_read_support_format_rar.c文件（RAR解码器）的‘parse_codes()’函数存在双重释放漏洞。攻击者可借助realloc(area,0)函数利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade libarchive libarchive to a higher version than 3.4.0,and avoid the version [3.1.0,3.4.0); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0