CVE-2023-30571

MEDIUM EPSS 9.1%
Published May 29, 20233y ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Medium
Find Similar
Published May 29, 2023 3y ago
Last Modified Jun 17, 2026 2w ago

Description

Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.

CVSS Details

Base Score
5.3
Exploitability
1.0
Impact
4.2
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Low
Availability High

Threat Intelligence

EPSS Exploit Probability
9.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-362

Affected Products 1

VendorProductVersionRange
libarchivelibarchive* ≤3.6.2

References 2

  • github.com https://github.com/libarchive/libarchive/issues/1876
    Issue Tracking
  • groups.google.com https://groups.google.com/g/libarchive-announce
    Release Notes

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.