CVE-2007-3644

Published: Jul 14, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (infinite loop) via (1) an end-of-file condition within a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive.

Affected (1)

Products: Freebsd: Libarchive

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Libarchive	Up to 2.2.3

References (36)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924

Source: secteam@freebsd.org

http://osvdb.org/38093

Source: secteam@freebsd.org

http://osvdb.org/38094

Source: secteam@freebsd.org

http://people.freebsd.org/~kientzle/libarchive/

Source: secteam@freebsd.org

http://secunia.com/advisories/26050

Source: secteam@freebsd.org

PatchVendor Advisory

http://secunia.com/advisories/26062

Source: secteam@freebsd.org

PatchVendor Advisory

http://secunia.com/advisories/26355

Source: secteam@freebsd.org

http://secunia.com/advisories/28377

Source: secteam@freebsd.org

http://security.freebsd.org/advisories/FreeBSD-SA-07:05.libarchive.asc

Source: secteam@freebsd.org

Vendor Advisory

http://security.freebsd.org/patches/SA-07:05/libarchive.patch

Source: secteam@freebsd.org

Patch

http://security.gentoo.org/glsa/glsa-200708-03.xml

Source: secteam@freebsd.org

http://www.debian.org/security/2008/dsa-1455

Source: secteam@freebsd.org

http://www.kb.cert.org/vuls/id/970849

Source: secteam@freebsd.org

US Government Resource

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: secteam@freebsd.org

http://www.securityfocus.com/bid/24885

Source: secteam@freebsd.org

Patch

http://www.securitytracker.com/id?1018379

Source: secteam@freebsd.org

http://www.vupen.com/english/advisories/2007/2521

Source: secteam@freebsd.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35402

Source: secteam@freebsd.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/38093

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/38094

Source: af854a3a-2127-422b-91ae-364da2661108

http://people.freebsd.org/~kientzle/libarchive/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26050

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/26062

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/26355

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28377

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.freebsd.org/advisories/FreeBSD-SA-07:05.libarchive.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.freebsd.org/patches/SA-07:05/libarchive.patch

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://security.gentoo.org/glsa/glsa-200708-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1455

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/970849

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24885

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securitytracker.com/id?1018379

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2521

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35402

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.