CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

Directory traversal

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

DEBIAN-CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

Null pointer dereference

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

elfutils denial of service vulnerability (CNVD-2018-21505)

elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. A security vulnerability in the 'elfend' function of libelf in elfutils 0.174 and earlier stems from the fact that while eu-size is used to process ar files within ar files, before failing to...

UBUNTU-CVE-2018-18520

An Invalid Memory Address Dereference exists in the function elfend in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handlear in size.c closes the outer ar file before handling all inner entries. The vulnerability allows attackers to cause a...

Mozilla: Out-of-bounds write with malicious MAR file

When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in order to occur. Thi...

USN-3684-1 perl vulnerability

It was discovered that Perl incorrectly handled certain archive files. An attacker could possibly use this to overwrite arbitrary files...

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service DoS attacks. A malicious user can pass an archive file to the lhareadfileheader1 function in archivereadsupportformatlha.c to cause an out-of-bounds read that can crash the application...

7-Zip and p7zip heap buffer overflow vulnerability

7-Zip is a free, open source compression/decompression software. p7zip is its version for Linux-based platforms. A heap buffer overflow vulnerability exists in the NCompress::NShrink::CDecoder::CodeReal method in versions prior to 7-Zip 18.00 and p7zip. A remote attacker can exploit this...

Skybox Platform Remote Code Execution Vulnerability

Skybox PlatformAn enterprise-grade network security management platform from US-based Skybox Security. The platform features attack vector analysis, firewall management, vulnerability and threat management, and more. A remote code execution vulnerability exists in Skybox Platform versions prior t...

Unspecified Vulnerability in SAP BASIS SAP Note Assistant

SAP BASIS is Germany SAP SAP company engaged in sap system management of a role, mainly responsible for sap system planning, installation, configuration, monitoring, maintenance, tuning, etc. SAP Note Assistant is one of the Note problem-solving aids. Mainly responsible for sap system planning,...

CVE-2017-13812

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted archive file...