CVE-2011-1779

libarchive 2.8.4-2.8.5 - Use-After-Free via Crafted TAR or ISO9660 Archive

Title source: llm
STIX 2.1

Description

Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted (1) TAR archive or (2) ISO9660 image.

References (2)

Core 2
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=705849

Scores

EPSS 0.0046
EPSS Percentile 64.2%

Details

CWE
CWE-399
Status published
Products (2)
freebsd/libarchive 2.8.4
freebsd/libarchive 2.8.5
Published Apr 13, 2012
Tracked Since Feb 18, 2026