Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 到 3.6.2 為止的 Libarchive 可造成目錄具有任何人皆可寫入的權限。archive_write_disk_posix.c 內的 umask() 呼叫會在極短時間內變更整個處理程序的 umask。與另一個執行緒的爭用情形可導致永久 umask 0 設定。此類爭用情形可導致使用權限 0777 (不含黏著位元) 建立隱含目錄這表示任何低權限的本機使用者皆可刪除和重新命名這些目錄中的檔案。 (CVE-2023-30571)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Libarchive 到 3.6.2 可导致目录具有全局可写权限。archive_write_disk_posix.c 内的 umask() 调用在极短的时间内更改了整个进程的 umask与另一个线程发生的一个争用条件可导致永久的 umask 0 设置。此类争用条件可导致使用权限 0777无粘滞位创建隐式目录这意味着任何低权限的本地用户都可以删除和重命名这些目录中的文件。 (CVE-2023-30571)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 3.6.2 までの Libarchive により、ディレクトリに誰でも書き込める権限が付与される可能性があります。archive_write_disk_posix.c 内の umask() 呼び出しは、非常に短い時間でプロセス全体の umask を変更します。別のスレッドとの競合状態により、恒久的な umask 0 設定が発生する可能性があります。このような競合状態は、権限 0777 (スティッキービットなし) での暗黙的なディレクトリ作成につながる可能性があります。これは、権限の低いローカルユーザーが、それらのディレクトリ内のファイルを削除したり、名前を変更したりできることを意味します。CVE-2023-30571

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside     archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race     condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to     implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-     privileged local user can delete and rename files inside those directories. (CVE-2023-30571)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0056 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2022-36227:
    In libarchive before 3.6.2, the software does not check for an error after calling calloc function that     can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
    NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: In     rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it,     then writing or reading memory is possible, which may lead to code execution.

    CVE-2023-30571:
    Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside     archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race     condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to     implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-     privileged local user can delete and rename files inside those directories.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has libarchive packages installed that are affected by multiple vulnerabilities:

  - list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which     can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a     verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.
    (CVE-2025-25724)

  - A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects     the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is     possible to launch the attack on the local host. The exploit has been disclosed to the public and may be     used. The vendor was contacted early about this disclosure but did not respond in any way. (CVE-2025-1632)

  - Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside     archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race     condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to     implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-     privileged local user can delete and rename files inside those directories. (CVE-2023-30571)

  - Libarchive Remote Code Execution Vulnerability (CVE-2024-26256)

  - execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds     access via a crafted archive file because src can move beyond dst. (CVE-2024-48957)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
227386	Linux Distros 未修補的弱點：CVE-2023-30571	Nessus	Misc.	2025/3/5	2025/9/29	medium
227386	Linux Distros 未修补的漏洞：CVE-2023-30571	Nessus	Misc.	2025/3/5	2025/9/29	medium
227386	Linux Distros のパッチ未適用の脆弱性: CVE-2023-30571	Nessus	Misc.	2025/3/5	2025/9/29	medium
227386	Linux Distros Unpatched Vulnerability : CVE-2023-30571	Nessus	Misc.	2025/3/5	2025/9/29	medium
239546	TencentOS Server 4: libarchive (TSSA-2025:0056)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	critical
242814	NewStart CGSL MAIN 7.02 : libarchive Multiple Vulnerabilities (NS-SA-2025-0118)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2026/1/21	medium

检测

插件搜索

medium

medium

medium

medium

critical

medium