CVE-2025-25724 affecting package libarchive for versions less than 3.7.7-2

CVE-2025-25724 affecting package libarchive for versions less than 3.7.7-2. A patched version of the package is available...

libarchive bsdunzip.c list null pointer dereference

...

CBL Mariner 2.0 Security Update: cmake / libarchive (CVE-2024-48615)

The version of cmake / libarchive installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48615 advisory. - Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdt...

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

...

PT-2025-24557

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw exists in the libarchive library that occurs when file streams are piped into bsdtar. This leads to an out-of-bounds read, which is a condition where the program reads data past the...

PT-2025-24556

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw has been identified in the libarchive library involving an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow,...

SUSE CVE-2024-48615

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

SUSE-SU-2025:20257-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c bsc1237606 - CVE-2025-25724: Fixed Buffer Overflow vulnerability in libarchive bsc1238610 - CVE-2024-48958: Fixed out-of-bounds access in executefilterdelta bsc1231624 -...

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c bsc1237606 CVE-2025-25724: Fixed Buffer Overflow vulnerability in libarchive bsc1238610 CVE-2024-48958: Fixed out-of-bounds access in executefilterdelta bsc1231624 CVE-2024-20697:...

macOS 15.x < 15.4 Multiple Vulnerabilities (122373)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.4. It is, therefore, affected by multiple vulnerabilities: - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To...

CVE-2024-48615

A flaw was found in Libarchive's bsdtar component. This vulnerability allows an attacker to trigger a NULL pointer dereference, leading to a crash and potential denial of service DoS via a crafted TAR archive...

AZL-59377 CVE-2024-48615 affecting package libarchive for versions less than 3.6.1-6

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

AZL-59385 CVE-2024-48615 affecting package cmake for versions less than 3.30.3-6

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

AZL-59338 CVE-2024-48615 affecting package cmake for versions less than 3.21.4-17

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

CVE-2024-48615

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

CVE-2024-48615

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

UBUNTU-CVE-2024-48615

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

CVE-2024-48615

CVE-2024-48615 involves a Null Pointer Dereference in libarchive (versions 3.7.6 and earlier) when bsdtar runs header_pax_extension in archive_read_support_format_tar.c:1844:8. The vulnerability is triggered within the tar format support, presenting a potential crash or denial of service. Affecte...

CVE-2024-48615

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the headerpaxextension function. An attacker can cause a system crash by providing a specially crafted TAR archive. Remediation Upgrade libarchive to version 3.8.1 or higher. References - GitHub Issue - GitH...