Logo
vulnerabilityCVE-2024-20696
Name
CVE-2024-20696
Source
NVD ( link)Debian ( link)
Description
Windows libarchive Remote Code Execution Vulnerability
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libarchive
Patched

Vulnerability Ratings#


7.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
3.8.7
Not Affected
buildroot
master
3.8.8
Not Affected
openwrt
master
3.8.1-r2
Not Affected
openwrt
openwrt-25.12
3.8.1-r2
Not Affected
yocto
master
3.8.7
Not Affected
yocto
scarthgap
3.7.9
Not Affected

Resolved with patches#


libarchive (yocto:kirkstone)

#
Title
Author
Resolve
1
rar4 reader: protect copy_from_lzss_window_to_unp() (#2172)
"Dustin L. Howett" <dustin@howett.net>
CVE-2024-20696