Vulnerability · Published May 29, 2023 · Assigned by mitre
CVE-2023-30571
Low 3.9
In plain English
A low-severity race condition in the libarchive package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libarchive | no fix listed | DEBIAN-CVE-2023-30571 |
| Debian:13 | libarchive | no fix listed | DEBIAN-CVE-2023-30571 |
| Debian:14 | libarchive | no fix listed | DEBIAN-CVE-2023-30571 |
| Ubuntu:22.04:LTS | libarchive | no fix listed | UBUNTU-CVE-2023-30571 |
Affected products (as reported)
Weakness: CWE-362 · Vector: CVSS:3.1/AC:H/AV:L/A:N/C:L/I:L/PR:L/S:C/UI:R