CVE-2017-14503

Published: Sep 17, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.

Affected (1)

Products: Libarchive: Libarchive

Libarchive

1 product

Libarchive

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libarchive Libarchive	Version 3.3.2

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (16)

https://access.redhat.com/errata/RHSA-2019:2298

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3698

Source: cve@mitre.org

https://bugs.debian.org/875960

Source: cve@mitre.org

Issue TrackingMailing ListThird Party Advisory

https://github.com/libarchive/libarchive/issues/948

Source: cve@mitre.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html

Source: cve@mitre.org

https://security.gentoo.org/glsa/201908-11

Source: cve@mitre.org

https://usn.ubuntu.com/3736-1/

Source: cve@mitre.org

https://www.debian.org/security/2018/dsa-4360

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:2298