CVE Vulnerability

CVE-2022-36227

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/libarchive/libarchive/issues/1754 Issue Tracking Patch
https://bugs.gentoo.org/882521 Issue Tracking Patch
https://github.com/libarchive/libarchive/blob/v3.0.0a/libarchive/archive_write.c#L215 Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V67OO2UUQAUJS3IK4JZPF6F3LUCBU6IS/ Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00034.html Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Information

Published : 2022-11-22 02:15

Updated : 2023-02-06 02:31

NVD link : CVE-2022-36227

Mitre link : CVE-2022-36227

Products Affected
No products.
CWE
CWE-476