OESA-2022-1494 libarchive security update

🗓️ 22 Jan 2022 11:03:28Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Libarchive security update fixes link resolution and ACL handling during extraction to prevent abuse.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	26 Jul 202214:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	28 Oct 202219:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.6 contains fixes for multiple security vulnerabilities.	25 Oct 202213:11	–	ibm
Tenable Nessus	Amazon Linux 2022 : bsdcat, bsdcpio, bsdtar (ALAS2022-2022-059)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : bsdcat, bsdcpio, bsdtar (ALAS2022-2022-201)	4 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bsdcat, bsdcpio, bsdtar (ALAS2023-2023-071)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libarchive (ALAS-2023-2374)	4 Dec 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0019: libarchive (ALINUX3-SA-2022:0019)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : libarchive (CESA-2022:0892)	15 Mar 202200:00	–	nessus

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-31566
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23177

03 Sep 2025 06:17Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.8

EPSS0.00042

link resolution acl handling archive extraction privilege escalation security vulnerability