Denial of Service Vulnerability in libarchive

The BSI has reported a vulnerability in libarchive, tracked as CVE-2024-20696. This vulnerability stems from improper memory management during the processing of archive files. A local attacker can exploit this flaw by providing a specially crafted archive file to an application that utilizes an affected version of libarchive. Successful exploitation results in memory corruption, which forces the host application to terminate, leading to a Denial of Service (DoS) state. Given that libarchive is a widely used library for reading and writing various archive formats, this issue may impact numerous applications across Windows, macOS, and Linux environments. Defenders should identify applications within their environment that link against libarchive and ensure they are updated to patched versions provided by the respective maintainers.

Impact

Successful exploitation of this vulnerability results in a Denial of Service, which can disrupt the availability of software relying on libarchive for archive processing. While the impact is limited to a DoS condition by a local attacker, the breadth of applications that include this library may lead to availability issues for critical business processes or security services that utilize archive extraction functionality.

Recommendation

• Perform a dependency audit to identify all software and services within the infrastructure that rely on libarchive.
• Update all identified instances of libarchive to the latest version patched for CVE-2024-20696 as released by the software vendor or distribution maintainer.
• Prioritize patching for internet-facing applications or services that allow user-supplied archive file uploads.