CVE-2018-1000880 log

Source
Severity High
Remote No
Type Denial of service
Description
A resource consumption issue has been found in libarchive >= 3.2.0 and <=3.3.3, in the _warc_read() function in archive_read_support_format_warm.c. An attacker can use a specially crafted WARC file to cause quasi-infinite run time and disk usage from a tiny file.
Group Package Affected Fixed Severity Status Ticket
AVG-837 libarchive 3.3.3-1 3.4.0-1 High Fixed
Date Advisory Group Package Severity Type
25 Jun 2019 ASA-201906-21 AVG-837 libarchive High multiple issues
References
https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
https://github.com/libarchive/libarchive/pull/1105
https://github.com/libarchive/libarchive/commit/9c84b7426660c09c18cc349f6d70b5f8168b5680