CVE-2024-48957: 
NixOS vulnerability analysis and mitigation

A vulnerability was discovered in libarchive before version 3.7.5, specifically in the executefilteraudio function within archivereadsupportformatrar.c. The vulnerability allows out-of-bounds access through a crafted archive file due to a condition where the source pointer can move beyond the destination pointer (NVD).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) with a CVSS v3.1 base score of 7.8 (High). The attack vector is Local (L), requiring low attack complexity (L) with no privileges required (N), but user interaction is required (R). The scope is unchanged (U), with high impact potential for confidentiality, integrity, and availability (NVD, Ubuntu).

The vulnerability affects the RAR filter support in libarchive, which was introduced in version 3.6.0. When successfully exploited, it can lead to out-of-bounds access, potentially compromising system security through unauthorized data access or system crashes (Debian).

The vulnerability has been fixed in libarchive version 3.7.5. Various distributions have released patched versions: Ubuntu 24.04 LTS (3.7.2-2ubuntu0.2), Ubuntu 22.04 LTS (3.6.0-1ubuntu1.2), and Debian has also issued fixes for affected versions (Ubuntu, Debian).