A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, vision…
6.5Orta
CVE-2021-36976
Açıklama
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
Zayıflık türü (CWE):
CWE-416
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| apple | ipados | < 15.4 | |
| apple | iphone os | < 15.4 | |
| apple | macos | < 12.3 | |
| apple | watchos | < 8.5 | |
| fedoraproject | fedora | 35 | |
| libarchive | libarchive | 3.4.1 – ≤ 3.5.2 | |
| splunk | universal forwarder | 8.2.0 – < 8.2.12 |
Kaynaklar ve yamalar
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libarchive/OSV-2021-557.yaml Third Party Advisory
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375 Issue TrackingThird Party Advisory
- FEDORA-2022-9bb794c5f5 vendor-advisoryMailing ListThird Party Advisory
- https://support.apple.com/kb/HT213183 Third Party Advisory
- https://support.apple.com/kb/HT213182 Third Party Advisory
- https://support.apple.com/kb/HT213193 Third Party Advisory
- 20220314 APPLE-SA-2022-03-14-2 watchOS 8.5 mailing-listMailing ListThird Party Advisory
- 20220314 APPLE-SA-2022-03-14-4 macOS Monterey 12.3 mailing-listMailing ListThird Party Advisory
- 20220314 APPLE-SA-2022-03-14-1 iOS 15.4 and iPadOS 15.4 mailing-listMailing ListThird Party Advisory
- GLSA-202208-26 vendor-advisoryThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/11/msg00007.html
CPE eşleşmeleri (NVD) (9)
cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*≥ 3.4.1 ≤ 3.5.2cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*< 15.4cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 15.4cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*< 12.3cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*< 8.5cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*≥ 8.2.0 < 8.2.12cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*≥ 9.0.0 < 9.0.6cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*