CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

Advisory ROSA-SA-2025-2704

Software: libarchive 3.3.2003 OS: ROSA Virtualization 3.0 packageevrstring: libarchive-3.3.2003 CVE-ID: CVE-2022-36227 BDU-ID: 2022-07496 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the calloc function of the libarchive archiving library is related to pointer dereferencing errors...

libarchive 安全漏洞

libarchive is a multi-format archive and compression library open-sourced by libarchive. A security vulnerability exists in libarchive version 3.7.7 and earlier versions, which stems from a null pointer dereference issue contained in the bsdunzip.c file...

PT-2025-7714 · Unknown +6 · Libarchive +6

Name of the Vulnerable Software and Affected Versions: libarchive versions up to 3.7.7 Description: A problematic issue was found in libarchive, affecting the list function of the file bsdunzip.c. This issue leads to a null pointer dereference. The attack can be launched on the local host...

Heap-based Buffer Over-read

libarchive.so is vulnerable to a Heap-based buffer over-read. The vulnerability is due to improper handling of truncated GNU long linknames in headergnulonglink, allowing an attacker to read out-of-bounds memory, potentially causing information disclosure or application crashes...

SUSE CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

CVE-2024-57970

A flaw was found in the libarchive library. A specially-crafted tar file may trigger a head-based buffer over-read condition due to incorrect handling of truncation in the middle of a long GNU linkname. This issue can cause an application crash leading to a denial of service...

UBUNTU-CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

ALPINE-CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

CVE-2024-57970

CVE-2024-57970 affects libarchive up to 3.7.7, introducing a heap-based buffer over-read in header_gnu_longlink when handling GNU long linknames within TAR archives. The root cause is improper truncation handling in the middle of a GNU long linkname, which can lead to memory read vulnerabilities ...

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

libarchive 安全漏洞

libarchive is a multi-format archive and compression library open-sourced by libarchive. A security vulnerability exists in libarchive 3.7.7 and earlier versions, which stems from a heap-based buffer over-read due to incorrect handling of truncation in the middle of GNU long link names...

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

PT-2025-6764

Name of the Vulnerable Software and Affected Versions libarchive versions 3.7.7 and earlier Description The issue is a heap-based buffer over-read in the header gnu longlink function in archive read support format tar.c via a TAR archive. This occurs because the software mishandles truncation in...

OESA-2025-1131 ark security update

Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha if appropriate command-line programs are installed. Security Fixes: libarchiveplugin.cp...

Astra Linux – Vulnerability in libarchive

A vulnerability was discovered in libarchive up to version 3.7.7. It has been classified as problematic. This issue affects the function list of the bsdunzip.c file. The vulnerability leads to a null pointer dereference. The attack can be launched on the local host. The exploit has been disclosed...