CVE:CVE-2020-9308
CNNVD:CNNVD-202002-1013
libarchive是一款多格式存档和压缩库。
libarchive 3.4.2之前版本中的archive_read_support_format_rar5.c文件存在缓冲区错误漏洞。攻击者可借助带有无效或损坏文件头的RAR5文件利用该漏洞造成SIGSEGV错误或其他危害。
solution:Upgrade libarchive libarchive to a higher version than 3.4.2,and avoid the version [3.4.0,3.4.2); Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.10,and avoid the version 16.04,18.04,19.10; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32