karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::operator=

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5725791050006528 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

karchive/karchive_fuzzer: Heap-buffer-overflow in KAr::openArchive

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5721807937601536 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

karchive/karchive_fuzzer: Heap-buffer-overflow in QByteArray::operator=

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5723860730642432 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::endsWith

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5699436728025088 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

karchive/karchive_fuzzer: Use-of-uninitialized-value in qstrlen

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5640360216231936 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

karchive/karchive_fuzzer: Heap-buffer-overflow in QBuffer::readData

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5691157767520256 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::QByteArray

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5657295809150976 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

karchive/karchive_fuzzer: Stack-buffer-overflow in QString::fromLocal8Bit

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5661125477138432 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in parseExtraField

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5703537020895232 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

Fedora 24 : kdelibs3 (2017-01eed6fe8c)

This kdelibs3 KDE 3 compatibility libraries update fixes the security issues : - CVE-2016-6232 karchive: Extraction of tar files possible to arbitrary system locations - CVE-2017-6410 kio: Information Leak when accessing https when using a malicious PAC file for the KDE 3 compatibility libraries...

Security update for karchive (important)

This update for karchive fixes the following issues: - CVE-2016-6232: A remote attacker could have been able to overwrite arbitrary files when tricking the user into downloading KDE extras such as wallpapers or Plasma Applets boo989698...

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

DEBIAN-CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

Directory traversal

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

CVE-2016-6232

CVE-2016-6232 is a directory traversal vulnerability in KDE’s KArchive (used by KDE Frameworks) that allows a remote attacker to write to arbitrary files by crafting a filename containing ../ inside an archive. Affected component: karchive within KDE Frameworks (KArchive) prior to version fixed b...

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

openSUSE: Security Advisory for karchive (openSUSE-SU-2016:1884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kf5-karchive FEDORA-2016-4701636a74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...