CVE:CVE-2022-36227
CNNVD:CNNVD-202211-3266
libarchive是一款多格式存档和压缩库。
libarchive 3.6.1版本存在代码问题漏洞，该漏洞源于在调用calloc函数后不会检查错误，如果函数失败，calloc函数会返回NULL指针，从而导致NULL指针取消引用。攻击者利用该漏洞可以执行任意代码。
solution:Upgrade libarchive libarchive to a higher version than 3.6.2,and avoid the version [3.0.0,3.6.2); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 37,and avoid the version 37