CVE-2007-3645

archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a tar header that follows a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive, which results in a NULL pointer dereference, a different issue than CVE-2007-3644.

Published: 2007-07-15 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2007-3645 is rated Moderate Risk (42.8/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 3.44%). Mandatory action: Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2007-3645

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 12.44% 3.44% -9.00%
2 2026-03-03 12.02% 12.44% +0.42%
3 2025-08-09 12.02%

Full EPSS history (17 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-3645

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.3 2.0 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:P)
Partial availability impact.
8.6 2.9 [email protected]

Weakness enumeration for CVE-2007-3645

OS Trackers for CVE-2007-3645

vendor priority summary link
debian low CVE-2007-3645 low priority: Debian including 1 source packages (libarchive), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2007-3645
gentoo normal CVE-2007-3645: 1 GLSA(s) (200708-03), 1 atom(s) (app-arch/libarchive); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2007-3645
suse medium CVE-2007-3645 severity moderate: SUSE including 7 source package names (bsdtar-3.8.1-160000.2.2, libarchive-devel-2.5.5-5.19, …), 10 product×package rows across 8 product lines (SUSE Linux Enterprise Server 11 SP1, SUSE Linux Enterprise Server 11 SP2, … (8 product lines)): Fixed 10. https://www.suse.com/security/cve/CVE-2007-3645/
ubuntu medium CVE-2007-3645 medium priority: Ubuntu including 1 source packages (libarchive), 9 status rows across 9 suites (dapper, edgy, feisty, gutsy, hardy, intrepid, jaunty, karmic, upstream): released 5, ignored 3, needs-triage 1. https://ubuntu.com/security/CVE-2007-3645

NVD evaluator notes for CVE-2007-3645

Solution: The vendor has released an update addressing this issue: http://people.freebsd.org/~kientzle/libarchive/

Affected software / configurations for CVE-2007-3645

Vendor Product Version Raw CPE
freebsd libarchive <= 2.2.3 cpe:2.3:a:freebsd:libarchive:*:*:*:*:*:*:*:*

References for CVE-2007-3645

URL Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924
http://osvdb.org/38093
http://osvdb.org/38094
http://people.freebsd.org/~kientzle/libarchive/
http://secunia.com/advisories/26050 Patch Vendor Advisory
http://secunia.com/advisories/26062 Patch Vendor Advisory
http://secunia.com/advisories/26355
http://secunia.com/advisories/28377
http://security.freebsd.org/advisories/FreeBSD-SA-07:05.libarchive.asc Patch Vendor Advisory
http://security.freebsd.org/patches/SA-07:05/libarchive.patch Patch
http://security.gentoo.org/glsa/glsa-200708-03.xml
http://www.debian.org/security/2008/dsa-1455
http://www.novell.com/linux/security/advisories/2007_15_sr.html
http://www.securityfocus.com/bid/24885 Patch
http://www.securitytracker.com/id?1018379
http://www.vupen.com/english/advisories/2007/2521
https://exchange.xforce.ibmcloud.com/vulnerabilities/35404
cvelogic Threat Intelligence