Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-14502
HistorySep 17, 2017 - 6:29 p.m.

CVE-2017-14502

2017-09-1718:29:00
CWE-193
CWE-125
[email protected]
web.nvd.nist.gov
119
cve
2017
14502
off-by-one error
libarchive
archive_read_support_format_rar.c
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.6%

JSON

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.

CPENameOperatorVersion
libarchive:libarchivelibarchiveeq3.3.2

Related

debiancve 1
ubuntucve 1
nessus 17
redhatcve 1
veracode 1
osv 4
rocky 1
prion 1
alpinelinux 1
openvas 17
suse 2
ibm 3
gentoo 1
cloudfoundry 1
ubuntu 1
fedora 2
mageia 1
debian 2
redhat 12
debiancve
debiancve
CVE-2017-14502
2017-09-17 18:29:00
ubuntucve
ubuntucve
CVE-2017-14502
2017-09-17 00:00:00
nessus
nessus
NewStart CGSL MAIN 6.02 : libarchive Vulnerability (NS-SA-2022-0092)
2022-11-15 00:00:00
EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2019-1973)
2019-09-23 00:00:00
openSUSE Security Update : libarchive (openSUSE-2018-1365)
2018-11-10 00:00:00
redhatcve
redhatcve
CVE-2017-14502
2017-09-22 10:24:05
veracode
veracode
Out-of-bounds Read
2018-11-23 06:49:02
osv
osv
libarchive bug fix and enhancement update
2021-05-18 05:34:11
CVE-2017-14502
2017-09-17 18:29:00
libarchive - security update
2018-12-27 00:00:00
rocky
rocky
libarchive bug fix and enhancement update
2021-05-18 05:34:11
prion
prion
Out-of-bounds
2017-09-17 18:29:00
alpinelinux
alpinelinux
CVE-2017-14502
2017-09-17 18:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2019-1973)
2020-01-23 00:00:00
openSUSE: Security Advisory for libarchive (openSUSE-SU-2018:3690-1)
2018-11-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:3571-1)
2021-06-09 00:00:00
suse
suse
Security update for libarchive (moderate)
2018-11-10 00:08:28
Security update for libarchive (moderate)
2018-11-10 00:29:34
ibm
ibm
Security Bulletin: Multiple vulnerabilities affect Watson Explorer (CVE-2017-14166, CVE-2017-14501, CVE-2017-14502, CVE-2017-14503)
2019-03-29 08:10:01
Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities
2021-12-03 18:52:37
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs
2021-10-19 15:38:04
gentoo
gentoo
libarchive: Multiple vulnerabilities
2019-08-15 00:00:00
cloudfoundry
cloudfoundry
USN-3859-1: libarchive vulnerabilities | Cloud Foundry
2019-01-24 00:00:00
ubuntu
ubuntu
libarchive vulnerabilities
2019-01-15 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: libarchive-3.3.3-1.fc29
2018-10-31 16:42:22
[SECURITY] Fedora 28 Update: libarchive-3.3.3-1.fc28
2018-11-21 03:13:00
mageia
mageia
Updated libarchive packages fix security vulnerabilities
2019-01-11 08:54:06
debian
debian
[SECURITY] [DSA 4360-1] libarchive security update
2018-12-27 16:40:27
[SECURITY] [DLA 1600-1] libarchive security update
2018-11-29 22:32:50
redhat
redhat
(RHSA-2021:2705) Moderate: Release of OpenShift Serverless 1.16.0
2021-07-13 16:31:04
(RHSA-2021:2130) Moderate: Windows Container Support for Red Hat OpenShift 2.0.1 security and bug fix update
2021-06-23 05:30:08
(RHSA-2021:2532) Moderate: Red Hat OpenShift Jaeger 1.17.9 security update
2021-06-23 15:33:42

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.6%

JSON
Related for CVE-2017-14502
debiancve1ubuntucve1nessus17redhatcve1veracode1osv4rocky1prion1alpinelinux1openvas17suse2ibm3gentoo1cloudfoundry1ubuntu1fedora2mageia1debian2redhat12