CVE-2018-1000879: libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contain...

Security readout for executives and security teams

CVE-2018-1000879 is a libarchive denial-of-service issue. If a system opens a specially crafted archive, libarchive can crash while parsing access-control-list data. The source bundle does not show code execution or data theft, but services that automatically process untrusted archives could be disrupted. Exposure is most likely on hosts or applications using libarchive v3.3.0 or later to inspect, unpack, index, scan, or accept archive files. The bundle's affected-product metadata is incomplete, so distribution package inventories and application dependency checks are required. Prioritize remediation where libarchive processes untrusted uploads, email attachments, customer archives, or CI artifacts. For desktop-only use, urgency is lower but still appropriate through normal patch cycles. Mitigation focus: Identify systems and applications using libarchive v3.3.0 or later.; Apply vendor or distribution updates that include the libarchive ACL parser fix.; Review Fedora, openSUSE, Ubuntu, and upstream libarchive guidance for package status..

Prepared

Jun 6, 2026, 22:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.