Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-1006-1:52184
HistoryJun 30, 2017 - 9:53 a.m.

[SECURITY] [DLA 1006-1] libarchive security update

2017-06-3009:53:12
lists.debian.org
8

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON

Package : libarchive
Version : 3.0.4-3+wheezy6
CVE ID : CVE-2016-10209 CVE-2016-10349 CVE-2016-10350
Debian Bug : 859456 861609

Multiple denial of services vulnerabilities have been identified in
libarchive when manipulating specially crafted archives.

CVE-2016-10209

NULL pointer dereference and application crash in the
archive_wstring_append_from_mbs() function.

CVE-2016-10349

Heap-based buffer over-read and application crash in the
archive_le32dec() function.

CVE-2016-10350

Heap-based buffer over-read and application crash in the
archive_read_format_cab_read_header() function.

For Debian 7 "Wheezy", these problems have been fixed in version
3.0.4-3+wheezy6.

We recommend that you upgrade your libarchive packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

–
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian9amd64libarchive-tools< 3.2.2-2+deb9u1libarchive-tools_3.2.2-2+deb9u1_amd64.deb
Debian9armellibarchive-dev< 3.2.2-2+deb9u1libarchive-dev_3.2.2-2+deb9u1_armel.deb
Debian9amd64libarchive13-dbgsym< 3.2.2-2+deb9u1libarchive13-dbgsym_3.2.2-2+deb9u1_amd64.deb
Debian9mips64ellibarchive13-dbgsym< 3.2.2-2+deb9u1libarchive13-dbgsym_3.2.2-2+deb9u1_mips64el.deb
Debian8amd64libarchive13< 3.1.2-11+deb8u4libarchive13_3.1.2-11+deb8u4_amd64.deb
Debian9i386libarchive-tools-dbgsym< 3.2.2-2+deb9u1libarchive-tools-dbgsym_3.2.2-2+deb9u1_i386.deb
Debian9mipsellibarchive13-dbgsym< 3.2.2-2+deb9u1libarchive13-dbgsym_3.2.2-2+deb9u1_mipsel.deb
Debian9ppc64ellibarchive-tools< 3.2.2-2+deb9u1libarchive-tools_3.2.2-2+deb9u1_ppc64el.deb
Debian9mips64ellibarchive-tools< 3.2.2-2+deb9u1libarchive-tools_3.2.2-2+deb9u1_mips64el.deb
Debian9allbsdcpio< 3.2.2-2+deb9u1bsdcpio_3.2.2-2+deb9u1_all.deb
Rows per page:
1-10 of 831

Related

osv 6
nessus 18
openvas 17
mageia 1
gentoo 1
ibm 1
cloudfoundry 1
ubuntu 1
suse 1
prion 4
ubuntucve 3
debiancve 3
fedora 4
cve 4
redhatcve 3
veracode 2
debian 2
osv
osv
libarchive - security update
2017-06-30 00:00:00
CVE-2016-10209
2017-04-03 05:59:00
CVE-2016-10349
2017-05-01 01:59:00
nessus
nessus
Debian DLA-1006-1 : libarchive security update
2017-07-03 00:00:00
GLSA-201710-19 : libarchive: Multiple vulnerabilities
2017-10-18 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-3736-1)
2018-08-14 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1006-1)
2018-01-28 00:00:00
Mageia: Security Advisory (MGASA-2017-0132)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-3736-1)
2018-10-26 00:00:00
mageia
mageia
Updated libarchive packages fix security vulnerabilities
2017-05-07 23:20:23
gentoo
gentoo
libarchive: Multiple vulnerabilities
2017-10-18 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities affect Watson Explorer (CVE-2016-8688, CVE-2016-8689, CVE-2017-5601, CVE-2016-10209, CVE-2016-10350, CVE-2016-10349)
2018-08-22 13:38:10
cloudfoundry
cloudfoundry
USN-3736-1: libarchive vulnerabilities | Cloud Foundry
2018-09-11 00:00:00
ubuntu
ubuntu
libarchive vulnerabilities
2018-08-13 00:00:00
suse
suse
Security update for libarchive (moderate)
2018-11-10 00:29:34
prion
prion
Null pointer dereference
2017-04-03 05:59:00
Heap overflow
2017-05-01 01:59:00
Heap overflow
2017-05-01 01:59:00
ubuntucve
ubuntucve
CVE-2016-10209
2017-04-03 00:00:00
CVE-2016-10349
2017-04-30 00:00:00
CVE-2016-10350
2017-04-30 00:00:00
debiancve
debiancve
CVE-2016-10209
2017-04-03 05:59:00
CVE-2016-10350
2017-05-01 01:59:00
CVE-2016-10349
2017-05-01 01:59:00
fedora
fedora
[SECURITY] Fedora 29 Update: libarchive-3.3.3-1.fc29
2018-10-31 16:42:22
[SECURITY] Fedora 28 Update: libarchive-3.3.3-1.fc28
2018-11-21 03:13:00
[SECURITY] Fedora 25 Update: libarchive-3.2.2-2.fc25
2017-04-22 09:24:56
cve
cve
CVE-2016-10209
2017-04-03 05:59:00
CVE-2016-10350
2017-05-01 01:59:00
CVE-2016-10349
2017-05-01 01:59:00
redhatcve
redhatcve
CVE-2016-10209
2017-04-06 12:18:03
CVE-2016-10349
2017-05-10 08:54:06
CVE-2016-10350
2017-05-10 08:53:51
veracode
veracode
Heap-based Buffer Over-read
2018-11-23 05:52:20
Denial Of Service (DoS) Via Heap-Based Buffer Over-Read
2018-11-23 06:11:15
debian
debian
[SECURITY] [DSA 4360-1] libarchive security update
2018-12-27 16:40:27
[SECURITY] [DLA 1600-1] libarchive security update
2018-11-29 22:32:50

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON
Related for DEBIAN:DLA-1006-1:52184
osv6nessus18openvas17mageia1gentoo1ibm1cloudfoundry1ubuntu1suse1prion4ubuntucve3debiancve3fedora4cve4redhatcve3veracode2debian2