Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2025-1958)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-5915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over- read due to the size of a filter block potentially...

Linux Distros Unpatched Vulnerability : CVE-2025-5914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2025-1932)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-20696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Windows libarchive Remote Code Execution Vulnerability CVE-2024-20696 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2025-5916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC...

Linux Distros Unpatched Vulnerability : CVE-2025-5917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file...

FreeBSD-SA-25:07.libarchive

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:07.libarchive Security Advisory The FreeBSD Project Topic: Integer overflow in libarchive leading to double free Category: contrib Module: libarchive...

Medium: libarchive

Issue Overview: A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This means the library may attempt to read beyond the allocated memory...

SUSE-SU-2025:02718-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

Advisory ROSA-SA-2025-2931

Software: libarchive 3.6.2 OS: ROSA-CHROME unaffected versions = libarchive-3.6.2-5 affected versions libarchive-3.6.2-5 CVE-ID: CVE-2025-1632 BDU-ID: 2025-05203 CVE-Crit: LOW CVE-DESC.: A vulnerability in the bsdunzip.c file of the Libarchive library is related to a NULL pointer dereference erro...

Linux Distros Unpatched Vulnerability : CVE-2025-5918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for...

CLSA-2025-1754338412 libarchive: Fix of CVE-2025-25724

CVE-2025-25724: fix crash in listitemverbose on invalid time...

Amazon Linux 2023 : bsdcat, bsdcpio, bsdtar (ALAS2023-2025-1091)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1091 advisory. A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over- read due to the size of a filter block potentially exceeding the...

Advisory ROSA-SA-2025-2908

Software: libarchive 3.6.2 OS: ROSA-CHROME unaffected versions = libarchive-3.6.2-4 affected versions libarchive-3.6.2-4 CVE-ID: CVE-2024-26256 BDU-ID: 2024-02924 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libarchive archiving library is related to an operation exceeding buffer boundaries i...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2025:02566-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02566-1 advisory. - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekda...

SUSE-SU-2025:02566-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

Amazon Linux 2 : libarchive (ALAS-2025-2932)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2932 advisory. A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...

Medium: libarchive

Issue Overview: A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leadi...

SUSE SLES12 Security Update : libarchive (SUSE-SU-2025:02522-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02522-1 advisory. - CVE-2025-5916, Fixed integer overflow while reading warc files at archivereadsupportformatwarc.c bsc1244270 - CVE-2025-5914: Fixed double fr...