CVE-2024-37407 — CRITICAL (9.1)

Vulnerability Description

Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directory in archive_read_support_format_zip.c.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Libarchive	Libarchive	3.7.3

Related Weaknesses (CWE)

CWE-125

References

https://github.com/libarchive/libarchive/commit/b6a979481b7d77c12fa17bbed94576b6Issue Tracking
https://github.com/libarchive/libarchive/pull/2145ExploitIssue Tracking
https://github.com/libarchive/libarchive/releases/tag/v3.7.4Patch
https://github.com/libarchive/libarchive/commit/b6a979481b7d77c12fa17bbed94576b6Issue Tracking
https://github.com/libarchive/libarchive/pull/2145ExploitIssue Tracking
https://github.com/libarchive/libarchive/releases/tag/v3.7.4Patch

FAQ

What is CVE-2024-37407?

CVE-2024-37407 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directory in archive_read_support_format_zip.c.

How severe is CVE-2024-37407?

CVE-2024-37407 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-37407?

Check the references section above for vendor advisories and patch information. Affected products include: Libarchive Libarchive.