CVE-2024-55587

CVE-2024-55587 This repository is proof of concept for CVE-2024-55587 vulnerability in python library libarchive. The generatezip file creates malicious zip that will exploit u safe extraction of files in libarchive extractall method. The vulnerablezip is just an exaple of vulnerable code...

CVE-2024-20696

libarchive-harness-win - CVE-2024-20696 Blog post: https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/ A simple test harness for CVE-2024-20696 1. Download a version of archiveint.dll that you want to test 2. Update the path here 3. Update the file pa...

CVE-2025-59284-PoC

CVE-2025-59284-PoC Proof of concept for CVE-2025-59284 libarchive exploit usage: Usage: Poc.py e.g python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar Technical writeup: https://sec-fault.com/blog/cve-2025-59284/ Video...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-device iOS 18.5 proof A controlled heap over-read / memory-disclosure in libarchive's RAR v4 filter path copyfromlzsswindow. This repo reproduces it end to end: local ASan, a from-scratch RAR v4 encoder that dials the leak size, and an...

CentOS Linux 6 [TuxCare] Security Update: libarchive / libarchive-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792818341)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792818341 advisory. - An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the lin...

libarchive: Fix of 2 CVEs

CVE-2021-23177: fix extraction of ACLs to the symlink target instead of the link - CVE-2021-31566: do not follow symlinks when fixing up permissions and file flags - CVE-2026-5121: validate pzlog2bs in the iso9660 zisofs reader...

CLSA-2026-1792818643 libarchive: Fix of 2 CVEs

CVE-2021-23177: fix extraction of ACLs to the symlink target instead of the link - CVE-2021-31566: do not follow symlinks when fixing up permissions and file flags - CVE-2026-5121: validate pzlog2bs in the iso9660 zisofs reader...

CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation...

CVE-2026-17591

A flaw was found in libarchive. An attacker can cause a Denial of Serv...

UBUNTU-CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation...

UBUNTU-CVE-2026-17591

A flaw was found in libarchive. An attacker can cause a Denial of Serv...

SUSE CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

OESA-2026-4415 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

Linux Distros Unpatched Vulnerability : CVE-2026-92205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on...

libarchive Windows Code Execution

The vulnerability of the libarchive library for Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DEBIAN-CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-92205 BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

EUVD-2026-107403

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...