Vulnerability in Libarchive
CVE-2023-30571
Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.
Vulnerability class: Race Condition
EPSS: 0.002 (9.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Libarchive
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Release Notes)
- cve@mitre.org (Issue Tracking)
Frequently asked questions
- What is CVE-2023-30571?
- CVE-2023-30571 is a low-severity vulnerability in Libarchive, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 3.9/10. Published 2023-05-29.
- How severe is CVE-2023-30571?
- Low severity. CVSS v3 base score is 3.9 out of 10.