libarchive vulnerabilities

2011-12-1900:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.016

Percentile

87.4%

JSON

Releases

Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

libarchive - Library to read/write archive files

Details

It was discovered that libarchive incorrectly handled certain ISO 9660
image files. If a user were tricked into using a specially crafted
ISO 9660 image file, a remote attacker could cause libarchive to crash or
possibly execute arbitrary code with user privileges. (CVE-2011-1777)

It was discovered that libarchive incorrectly handled certain tar archive
files. If a user were tricked into using a specially crafted tar file, a
remote attacker could cause libarchive to crash or possibly execute
arbitrary code with user privileges. (CVE-2011-1778)

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchlibarchive1< 2.8.4-1ubuntu0.11.10.1UNKNOWN
Ubuntu11.10noarchbsdcpio< 2.8.4-1ubuntu0.11.10.1UNKNOWN
Ubuntu11.10noarchbsdtar< 2.8.4-1ubuntu0.11.10.1UNKNOWN
Ubuntu11.10noarchlibarchive-dev< 2.8.4-1ubuntu0.11.10.1UNKNOWN
Ubuntu11.04noarchlibarchive1< 2.8.4-1ubuntu0.11.04.1UNKNOWN
Ubuntu11.04noarchbsdcpio< 2.8.4-1ubuntu0.11.04.1UNKNOWN
Ubuntu11.04noarchbsdtar< 2.8.4-1ubuntu0.11.04.1UNKNOWN
Ubuntu11.04noarchlibarchive-dev< 2.8.4-1ubuntu0.11.04.1UNKNOWN
Ubuntu10.10noarchlibarchive1< 2.8.4-1ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchbsdcpio< 2.8.4-1ubuntu0.10.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.10	noarch	libarchive1	< 2.8.4-1ubuntu0.11.10.1	UNKNOWN
Ubuntu	11.10	noarch	bsdcpio	< 2.8.4-1ubuntu0.11.10.1	UNKNOWN
Ubuntu	11.10	noarch	bsdtar	< 2.8.4-1ubuntu0.11.10.1	UNKNOWN
Ubuntu	11.10	noarch	libarchive-dev	< 2.8.4-1ubuntu0.11.10.1	UNKNOWN
Ubuntu	11.04	noarch	libarchive1	< 2.8.4-1ubuntu0.11.04.1	UNKNOWN
Ubuntu	11.04	noarch	bsdcpio	< 2.8.4-1ubuntu0.11.04.1	UNKNOWN
Ubuntu	11.04	noarch	bsdtar	< 2.8.4-1ubuntu0.11.04.1	UNKNOWN
Ubuntu	11.04	noarch	libarchive-dev	< 2.8.4-1ubuntu0.11.04.1	UNKNOWN
Ubuntu	10.10	noarch	libarchive1	< 2.8.4-1ubuntu0.10.10.1	UNKNOWN
Ubuntu	10.10	noarch	bsdcpio	< 2.8.4-1ubuntu0.10.10.1	UNKNOWN