CVE:CVE-2018-1000880
CNNVD:CNNVD-201812-945
libarchive是一个多格式存档和压缩库。
libarchive 3.2.0及之后版本（3.4.0版本已修复）中的libarchive/archive_read_support_format_warc.c文件（WARC解析器）的‘_warc_read()’函数存在资源管理错误漏洞。攻击者可借助特制的WARC文件利用该漏洞造成拒绝服务。
solution:Upgrade libarchive libarchive to a higher version than 3.4.0,and avoid the version [3.2.0,3.4.0); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0