p PatchFirst

CVE-2024-26256

CVE-2024-26256 · Libarchive Remote Code Execution Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Libarchive Remote Code Execution Vulnerability

CVSS 7.8 · High · EPSS 87.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • windows 11 version 22h2

    Versions
    • ≥ 10.0.22621.0, < 10.0.22621.3447: Affected (custom)

    Update to 10.0.22621.3447

  • windows 11 version 22h3

    Versions
    • ≥ 10.0.22631.0, < 10.0.22631.3447: Affected (custom)

    Update to 10.0.22631.3447

  • windows 11 version 23h2

    Versions
    • ≥ 10.0.22631.0, < 10.0.22631.3447: Affected (custom)

    Update to 10.0.22631.3447

  • windows server 2022, 23h2 edition (server core installation)

    Versions
    • ≥ 10.0.25398.0, < 10.0.25398.830: Affected (custom)

    Update to 10.0.25398.830

  • libarchive Debian:12

    Versions
    • 3.6.2-1
    Affected ranges
    • ECOSYSTEM: < 3.6.2-1+deb12u1

    Update to 3.6.2-1+deb12u1

  • libarchive Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.7.2-2.1

    Update to 3.7.2-2.1

  • libarchive Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.7.2-2.1

    Update to 3.7.2-2.1

  • libarchive Ubuntu:22.04:LTS

    Versions
    • 3.4.3-2
    • 3.4.3-2build1
    • 3.5.2-1
    • 3.5.2-1ubuntu1
    • 3.6.0-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 3.6.0-1ubuntu1.1

    Update to 3.6.0-1ubuntu1.1

  • libarchive Ubuntu:24.04:LTS

    Versions
    • 3.6.2-1ubuntu1
    • 3.7.2-1ubuntu1
    • 3.7.2-1ubuntu2
    • 3.7.2-1.1ubuntu2
    • 3.7.2-2
    Affected ranges
    • ECOSYSTEM: < 3.7.2-2ubuntu0.1

    Update to 3.7.2-2ubuntu0.1

Original sources

Check your server →