CVE-2024-48615

Description

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/libarchive/libarchive/releases/download/v3.7.6/libarchive-3.7.6.tar.gz Product
• https://github.com/88Sanghy88/crash-test ExploitThird Party Advisory