| Vulnerability Name: | CVE-2011-1777 (CCN-74880) |
| Assigned: | 2010-12-30 |
| Published: | 2010-12-30 |
| Updated: | 2018-01-10 |
| Summary: | Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ISO9660 image. |
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)| Exploitability Metrics: | Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None | | Scope: | Scope (S): Unchanged
| | Impact Metrics: | Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low |
|
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)| Exploitability Metrics: | Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None | | Impact Metrics: | Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial |
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)| Exploitability Metrics: | Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
| | Impact Metrics: | Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial |
5.1 Medium (REDHAT CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
3.8 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)| Exploitability Metrics: | Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None | | Impact Metrics: | Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial |
|
| Vulnerability Type: | CWE-119
|
| Vulnerability Consequences: | Gain Access |
| References: | Source: CCN
Type: libarchive Web site
libarchive
Source: CONFIRM
Type: UNKNOWN
http://code.google.com/p/libarchive/source/detail?r=3158
Source: MITRE
Type: CNA
CVE-2011-1777
Source: APPLE
Type: UNKNOWN
APPLE-SA-2012-05-09-1
Source: CCN
Type: RHSA-2011-1507
Moderate: libarchive security update
Source: SECUNIA
Type: UNKNOWN
48034
Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT5281
Source: DEBIAN
Type: UNKNOWN
DSA-2413
Source: DEBIAN
Type: DSA-2413
libarchive -- buffer overflows
Source: CCN
Type: OSVDB ID: 77464
libarchive archive_read_support_format_iso9660.c ISO 9660 CD-ROM Image Handling Remote Overflow
Source: CCN
Type: Red Hat Bugzilla Bug 705849
CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues
Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=705849
Source: XF
Type: UNKNOWN
libarchive-heapaddentry-bo(74880)
Source: REDHAT
Type: UNKNOWN
RHSA-2011:1507
|
| Vulnerable Configuration: | Configuration 1:
cpe:/a:freebsd:libarchive:2.0:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.2:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.2.3:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.3:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.4:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.5:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.6:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.6.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.6.2:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.7.0:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.7.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.0:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.2:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.3:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.4:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:*:*:*:*:*:*:*:* (Version <= 2.8.5)
Configuration RedHat 1:
cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*
Configuration RedHat 2:
cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*
Configuration CCN 1:
cpe:/a:freebsd:libarchive:2.2.3:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.4:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.5:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.3:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.2:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.8.0:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.7.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.7.0:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.6.2:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.6.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.6:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.5:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.4:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.3:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.2:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.1:*:*:*:*:*:*:*OR cpe:/a:freebsd:libarchive:2.0:*:*:*:*:*:*:*AND cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*OR cpe:/o:redhat:enterprise_linux_server_eus:6.1.z:*:*:*:*:*:*:*
 Denotes that component is vulnerable |
| Oval Definitions |
|
| BACK |