一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月17日

CVE-2026-17591 [LOW] – A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potenti

未分类
📑 文章目录

A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.