436 matches found
CVE-2026-5121
CVE-2026-5121 and CVE-2026-4424 affect libarchive, with a vulnerability in ISO9660 image processing (32-bit) that can cause a heap overflow when processing a crafted ISO9660 image, potentially enabling arbitrary code execution. Described as a 32-bit integer overflow in zisofs block pointer alloca...
CVE-2026-5121 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...
CVE-2026-5121
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...
CVE-2026-5121
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...
CVE-2026-5121 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...
EUVD-2026-13099
A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field pzlog2bs read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to...
CVE-2026-4426
A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field pzlog2bs read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to...
CVE-2026-4426
A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field pzlog2bs read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to...
MiracleLinux 7 : libarchive-3.1.2-12.el7 (AXSA:2019-4084:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4084:01 advisory. libarchive: Double free in RAR decoder resulting in a denial of service CVE-2018-1000877 libarchive: Use after free in RAR decoder resulting in a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000715)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000715 advisory. The rockcontinue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000857)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000857 advisory. The parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service unkillable mount proce...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000889)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000889 advisory. Stack consumption vulnerability in the parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denia...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001814)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001814 advisory. The rockcontinue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002113)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002113 advisory. The rockcontinue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002244)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002244 advisory. Stack consumption vulnerability in the parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denia...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002386)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002386 advisory. Stack consumption vulnerability in the parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denia...
PT-2026-28808
Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description An integer overflow exists in the zisofs block pointer allocation logic on 32-bit systems. A remote attacker can exploit this by providing a specially crafted ISO9660 image, potentially...
EUVD-2011-1775
Malware in sbrugna...