p PatchFirst

CVE-2024-20696

CVE-2024-20696 · Windows libarchive Remote Code Execution Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Windows libarchive Remote Code Execution Vulnerability

CVSS 7.3 · High · EPSS 3.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • windows 10 version 1809

    Versions
    • ≥ 10.0.17763.0, < 10.0.17763.5329: Affected (custom)

    Update to 10.0.17763.5329

  • windows 10 version 1809

    Versions
    • ≥ 10.0.0, < 10.0.17763.5329: Affected (custom)

    Update to 10.0.17763.5329

  • windows server 2019

    Versions
    • ≥ 10.0.17763.0, < 10.0.17763.5329: Affected (custom)

    Update to 10.0.17763.5329

  • windows server 2019 (server core installation)

    Versions
    • ≥ 10.0.17763.0, < 10.0.17763.5329: Affected (custom)

    Update to 10.0.17763.5329

  • windows server 2022

    Versions
    • ≥ 10.0.20348.0, < 10.0.20348.2227: Affected (custom)

    Update to 10.0.20348.2227

  • windows 11 version 21h2

    Versions
    • ≥ 10.0.0, < 10.0.22000.2713: Affected (custom)

    Update to 10.0.22000.2713

  • windows 10 version 21h2

    Versions
    • ≥ 10.0.19043.0, < 10.0.19044.3930: Affected (custom)

    Update to 10.0.19044.3930

  • windows 11 version 22h2

    Versions
    • ≥ 10.0.22621.0, < 10.0.22621.3007: Affected (custom)

    Update to 10.0.22621.3007

  • windows 10 version 22h2

    Versions
    • ≥ 10.0.19045.0, < 10.0.19045.3930: Affected (custom)

    Update to 10.0.19045.3930

  • windows 11 version 22h3

    Versions
    • ≥ 10.0.22631.0, < 10.0.22631.3007: Affected (custom)

    Update to 10.0.22631.3007

  • windows 11 version 23h2

    Versions
    • ≥ 10.0.22631.0, < 10.0.22631.3007: Affected (custom)

    Update to 10.0.22631.3007

  • windows server 2022, 23h2 edition (server core installation)

    Versions
    • ≥ 10.0.25398.0, < 10.0.25398.643: Affected (custom)

    Update to 10.0.25398.643

  • libarchive Debian:12

    Versions
    • 3.6.2-1
    • 3.6.2-1+deb12u1
    Affected ranges
    • ECOSYSTEM: < 3.6.2-1+deb12u2

    Update to 3.6.2-1+deb12u2

  • libarchive Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.7.4-1.1

    Update to 3.7.4-1.1

  • libarchive Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.7.4-1.1

    Update to 3.7.4-1.1

  • libarchive Ubuntu:Pro:14.04:LTS

    Versions
    • 3.1.2-5ubuntu1
    • 3.1.2-7ubuntu1
    • 3.1.2-7ubuntu2
    • 3.1.2-7ubuntu2.1
    • 3.1.2-7ubuntu2.2
    • 3.1.2-7ubuntu2.3
    • 3.1.2-7ubuntu2.4
    • 3.1.2-7ubuntu2.6
    • 3.1.2-7ubuntu2.7
    • 3.1.2-7ubuntu2.8
    • 3.1.2-7ubuntu2.8+esm1
    • 3.1.2-7ubuntu2.8+esm3
    Affected ranges
    • ECOSYSTEM: < 3.1.2-7ubuntu2.8+esm4

    Update to 3.1.2-7ubuntu2.8+esm4

  • libarchive Ubuntu:Pro:16.04:LTS

    Versions
    • 3.1.2-11build1
    • 3.1.2-11ubuntu0.16.04.1
    • 3.1.2-11ubuntu0.16.04.2
    • 3.1.2-11ubuntu0.16.04.3
    • 3.1.2-11ubuntu0.16.04.4
    • 3.1.2-11ubuntu0.16.04.5
    • 3.1.2-11ubuntu0.16.04.6
    • 3.1.2-11ubuntu0.16.04.7
    • 3.1.2-11ubuntu0.16.04.8
    • 3.1.2-11ubuntu0.16.04.8+esm1
    Affected ranges
    • ECOSYSTEM: < 3.1.2-11ubuntu0.16.04.8+esm2

    Update to 3.1.2-11ubuntu0.16.04.8+esm2

  • libarchive Ubuntu:Pro:18.04:LTS

    Versions
    • 3.2.2-3.1
    • 3.2.2-3.1ubuntu0.1
    • 3.2.2-3.1ubuntu0.2
    • 3.2.2-3.1ubuntu0.3
    • 3.2.2-3.1ubuntu0.4
    • 3.2.2-3.1ubuntu0.5
    • 3.2.2-3.1ubuntu0.6
    • 3.2.2-3.1ubuntu0.7
    • 3.2.2-3.1ubuntu0.7+esm1
    Affected ranges
    • ECOSYSTEM: < 3.2.2-3.1ubuntu0.7+esm2

    Update to 3.2.2-3.1ubuntu0.7+esm2

  • libarchive Ubuntu:20.04:LTS

    Versions
    • 3.4.0-1
    • 3.4.0-1build1
    • 3.4.0-1ubuntu2
    • 3.4.0-2ubuntu1
    • 3.4.0-2ubuntu1.1
    • 3.4.0-2ubuntu1.2
    • 3.4.0-2ubuntu1.3
    Affected ranges
    • ECOSYSTEM: < 3.4.0-2ubuntu1.4

    Update to 3.4.0-2ubuntu1.4

  • libarchive Ubuntu:22.04:LTS

    Versions
    • 3.4.3-2
    • 3.4.3-2build1
    • 3.5.2-1
    • 3.5.2-1ubuntu1
    • 3.6.0-1ubuntu1
    • 3.6.0-1ubuntu1.1
    • 3.6.0-1ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 3.6.0-1ubuntu1.3

    Update to 3.6.0-1ubuntu1.3

  • libarchive Ubuntu:24.04:LTS

    Versions
    • 3.6.2-1ubuntu1
    • 3.7.2-1ubuntu1
    • 3.7.2-1ubuntu2
    • 3.7.2-1.1ubuntu2
    • 3.7.2-2
    • 3.7.2-2ubuntu0.1
    • 3.7.2-2ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 3.7.2-2ubuntu0.3

    Update to 3.7.2-2ubuntu0.3

Original sources

Check your server →