Description (CNA)
libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| libarchive / libarchive | affected 0 through 3.7.7 |
CWE
CWE-126
References
- https://github.com/libarchive/libarchive/issues/2415
- https://github.com/libarchive/libarchive/pull/2422
ADP enrichment
No English description supplied.
No references supplied.