High severity7.8NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026
CVE-2024-26256
CVE-2024-26256
Description
Libarchive Remote Code Execution Vulnerability
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*range: <3.7.4
- (no CPE)
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*range: <10.0.22621.3447
- cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*range: <10.0.22631.3447
- (no CPE)range: 10.0.22621.0
- (no CPE)range: 10.0.22631.0
- cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*Range: <10.0.25398.830
- osv-coords11 versionspkg:apk/chainguard/libarchivepkg:apk/chainguard/libarchive-devpkg:apk/chainguard/libarchive-docpkg:apk/chainguard/libarchive-toolspkg:apk/wolfi/libarchivepkg:apk/wolfi/libarchive-devpkg:apk/wolfi/libarchive-docpkg:apk/wolfi/libarchive-toolspkg:rpm/opensuse/bsdtar&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libarchive&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/libarchive&distro=SUSE%20Linux%20Micro%206.1
< 3.7.4-r0+ 10 more
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-r0
- (no CPE)range: < 3.7.4-1.1
- (no CPE)range: < 3.6.2-4.1
- (no CPE)range: < 3.7.4-slfo.1.1_2.1
- Range: 10.0.22631.0
- Microsoft/Windows Server 2022, 23H2 Edition (Server Core installation)v5Range: 10.0.25398.0
Patches
Vulnerability mechanics
References
9- github.com/LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262nvdPatch
- github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patchnvdPatch
- msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2024/06/04/2nvdMailing List
- www.openwall.com/lists/oss-security/2024/06/05/1nvdMailing List
- github.com/libarchive/libarchive/releases/tag/v3.7.4nvdRelease Notes
- lists.fedoraproject.org/archives/list/[email protected]/message/EWANFZ6NEMXFCALXWI2AFKYBOLONAVFC/nvdMailing List
- lists.fedoraproject.org/archives/list/[email protected]/message/TWAMR5TY47UKVYMWQXB34CWSBNTRYMBV/nvdMailing List
- www.openwall.com/lists/oss-security/2024/06/04/2nvdMailing List
News mentions
0No linked articles in our index yet.