{"id":"CVE-2024-20697","aliases":["EUVD-2024-18412","GHSA-w6xv-37jv-7cjr","SUSE-SU-2024:2083-1","SUSE-SU-2024:3940-1","SUSE-SU-2025:20050-1","SUSE-SU-2025:20087-1","SUSE-SU-2025:20257-1"],"status":"published","title":"Windows libarchive Remote Code Execution Vulnerability","description":"Windows libarchive Remote Code Execution Vulnerability","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.72163,"percentile":0.99437,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122"],"published":"2024-01-09T17:56:53Z","modified":"2026-06-17T07:07:39Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-150600.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-150600.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-150600.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-slfo.1.1_2.1"}]}],"bundled":7}],"products":[{"vendor":"microsoft","product":"windows 11 version 22h2"},{"vendor":"microsoft","product":"windows 11 version 22h3"},{"vendor":"microsoft","product":"windows 11 version 23h2"},{"vendor":"microsoft","product":"windows server 2022, 23h2 edition (server core installation)"},{"vendor":"microsoft","product":"windows_11_22h2"},{"vendor":"microsoft","product":"windows_11_23h2"},{"vendor":"microsoft","product":"windows_server_2022_23h2"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability","tags":["x_transferred"]},{"url":"https://github.com/advisories/GHSA-w6xv-37jv-7cjr","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/05/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/04/2","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20697"},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242083-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225971","tags":["report"]},{"url":"https://bugzilla.suse.com/1225972","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20697","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243940-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231624","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-48958","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520050-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520087-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231544","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-48957","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520257-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237606","tags":["report"]},{"url":"https://bugzilla.suse.com/1238610","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-25724","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-20697","title":"Windows libarchive Remote Code Execution Vulnerability","description":"Windows libarchive Remote Code Execution Vulnerability","status":"published","published":"2024-01-09T17:56:53.424Z","modified":"2025-06-05T20:16:53.298Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:33:56.868512Z"}],"euvd":[{"id":"EUVD-2024-18412","description":"Windows libarchive Remote Code Execution Vulnerability","status":"published","published":"2024-01-09T17:56:53Z","modified":"2025-06-05T20:16:53Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:32:28.636987Z"}],"ghsa":[{"id":"GHSA-w6xv-37jv-7cjr","title":"Windows Libarchive Remote Code Execution Vulnerability","description":"Windows Libarchive Remote Code Execution Vulnerability","status":"published","published":"2024-01-09T18:30:29Z","modified":"2024-06-10T18:30:51Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:57:27.150795Z"}],"nvd":[{"id":"CVE-2024-20697","description":"Windows libarchive Remote Code Execution Vulnerability","status":"published","published":"2024-01-09T18:15:53.13Z","modified":"2026-06-17T07:07:39.877Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:09:30.070039Z"}],"osv":[{"id":"SUSE-SU-2024:2083-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n- CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability (bsc#1225972).\n- CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971).\n","status":"published","published":"2024-06-19T06:33:39Z","modified":"2026-02-04T02:34:48.144142Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:3940-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n- CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability (bsc#1225972).\n- CVE-2024-48958: Fixed out-of-bounds access via a crafted archive file in execute_filter_delta function (bsc#1231624).\n","status":"published","published":"2024-11-07T10:09:07Z","modified":"2026-02-04T04:08:28.449368Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:20050-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n- CVE-2024-20696: Fixed out-of-bounds access in in copy_from_lzss_window_to_unp() (bsc#1225971)\n- CVE-2024-20697: Fixed heap based buffer overflow in rar e8 filter (bsc#1225972)\n","status":"published","published":"2025-02-03T08:55:48Z","modified":"2026-03-23T04:48:08.768545Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20087-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n- CVE-2024-48958: Fixed out-of-bounds access in execute_filter_delta (bsc#1231624).\n- CVE-2024-20697: Fixed out-of-bounds remote code execution vulnerability (bsc#1225972).\n- CVE-2024-48957: Fixed out-of-bounds access in execute_filter_audio (bsc#1231544).\n","status":"published","published":"2025-02-03T09:09:12Z","modified":"2026-03-23T04:48:52.342451Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20257-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n- CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c (bsc#1237606)\n- CVE-2025-25724: Fixed Buffer Overflow vulnerability in libarchive (bsc#1238610)\n- CVE-2024-48958: Fixed out-of-bounds access in execute_filter_delta (bsc#1231624)\n- CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability  (also attributed CVE-2024-26256) (CVE-2024-26256, bsc#1225972)\n- CVE-2024-48957: Fixed out-of-bounds access in execute_filter_audio (bsc#1231544)\n- CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971)\n\n","status":"published","published":"2025-03-31T14:21:24Z","modified":"2026-03-23T04:47:11.444555Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}