摘要:
libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.
安全等级: Low
公告ID: KylinSec-SA-2025-1142
发布日期: 2025年2月17日
关联CVE: CVE-2024-57970
libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2024-57970 | KY3.4-5A | libarchive | Unaffected |
| CVE-2024-57970 | V6 | libarchive | Unaffected |
