3313 matches found
CVE-2024-20696
libarchive-harness-win - CVE-2024-20696 Entrada de blog: https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/ Un sencillo banco de pruebas para CVE-2024-20696 1. Descargue una versión de archiveint.dll que desee probar 2. Actualice la ruta aquí 3...
cve-2025-5915
CVE-2025-5915 — libarchive RAR v4 힙 오버리드 실기기 iOS 18.5 증명 포함 libarchive의 RAR v4 필터 경로copyfromlzsswindow에서 통제된 힙 오버리드 / 메모리 노출 취약점. 이 저장소는 이를 처음부터 끝까지 재현합니다: 로컬 ASan, 누출 크기를 조절하는 처음부터 작성한 RAR v4 인코더, 그리고 휴대폰 자체 시스템 libarchive.2.dylib을 사용하는 iOS 18.5 실기기 데모. 버그 : parsefilter가 필터 blocklengthRAR-VM...
ROOT-OS-ALPINE-323-CVE-2026-4424 CVE-2026-4424 in libarchive - Patched by Root
Root has patched CVE-2026-4424 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-5121 CVE-2026-5121 in libarchive - Patched by Root
Root has patched CVE-2026-5121 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...
CVE-2024-55587
CVE-2024-55587 Este repositorio es una prueba de concepto para la vulnerabilidad CVE-2024-55587 en la biblioteca Python libarchive. El archivo generatezip crea un zip malicioso que explotará la extracción insegura de archivos en el método extractall de libarchive. El archivo vulnerablezip es solo...
Alibaba Cloud Linux 3 : 0258: libarchive (ALINUX3-SA-2026:0258)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0258 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14164: A double free issue has been...
[SECURITY] [DLA 4762-1] libarchive security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 31, 2026 https://wiki.debian.org/LTS -...
CVE-2025-59284-PoC
CVE-2025-59284-PoC Prueba de concepto para el exploit CVE-2025-59284 de libarchive uso: root@kitploit: Usage: Poc.py ej. python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar Artículo técnico: https://sec-fault.com/blog/cve-2025-59284/ Vídeo...
Debian dla-4762 : libarchive-dev - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4762 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected]...
RHBA-2022:3897 Red Hat Bug Fix Advisory: new packages: libarchive
Bulletin has no description...
Astra Linux – Vulnerability in libarchive
“executefilteraudio” in “archivereadsupportformatrar.c” in “libarchive” before version 3.7.5 allows out-of-bounds access via a crafted archive file, as “src” can move beyond “dst”...
Astra Linux – Vulnerability in libarchive
An improper link resolution flaw during the extraction of an archive can cause changes to the access control list ACL of the target of the link. An attacker may provide a malicious archive to a victim user, triggering this flaw when the victim tries to extract the archive. A local attacker may...
Astra Linux – Vulnerability in libarchive
The executefilterdelta function in archivereadsupportformatrar.c in libarchive before version 3.7.5 allows for out-of-bounds access through a crafted archive file, as src may move beyond dst...
Astra Linux – Vulnerability in libarchive
In libarchive versions 3.4.1 through 3.5.1, there is a use-after-free in the copystring function called from douncompressblock and processblock...
Astra Linux – Vulnerability in libarchive
A issue was discovered in libarchive bsdtar before version 3.8.1, in the function applysubstitution in the file tar/subst.c, when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to a denial of service Out-of-Memory crash...
Astra Linux – Vulnerability in libarchive
Libarchive Remote Code Execution Vulnerability...
Astra Linux – Vulnerability in libarchive
An improper link resolution flaw can occur during the extraction of an archive, resulting in changes to the mode, times, access control lists, and flags of a file within the archive. An attacker may provide a malicious archive to a victim user, triggering this flaw when the victim attempts to...
Astra Linux – Vulnerability in libarchive
In libarchive before version 3.6.2, the software does not check for an error after calling the calloc function. This function may return a NULL pointer if it fails, leading to a NULL pointer being dereferenced. NOTE: The discoverer cites this CWE-476 issue, but third parties dispute its impact on...