3203 matches found
CVE-2024-55587
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
python-libarchive 安全漏洞
python-libarchive is a Libarchive wrapper for Python open-sourced by SmartFile. A security vulnerability exists in python-libarchive version 4.2.1, which stems from allowing directory traversal of ZipFile.extractall and ZipFile.extract in a zip.py extraction...
Directory Traversal
Overview python-libarchive is an A libarchive wrapper for Python supporting password protection. Affected versions of this package are vulnerable to Directory Traversal due to improper input sanitization through the ZipFile, extract and extractall methods. An attacker can create arbitrary files o...
CVE-2024-55587
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
CVE-2024-55587
The CVE-2024-55587 issue affects python-libarchive up to version 4.2.1, as reported by Red Hat/NVD and corroborating sources. The vulnerability exists in ZipFile.extractall and ZipFile.extract (in zip.py), enabling directory traversal to create files outside the intended directory. The Red Hat en...
CVE-2024-55587
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
CVE-2024-55587
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
Exploit for CVE-2024-55587
CVE-2024-55587 This repository is proof of concept for C...
Out-of-bounds Access
libarchive.so is vulnerable to Out-of-bounds Access. The vulnerability is due to insufficient bounds checking in the executefilteraudio function within archivereadsupportformatrar.c, which allows the src pointer to move beyond the dst pointer when processing crafted archive files...
K000148646: libarchive vulnerability CVE-2018-1000879
Security Advisory Description libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear ...
K000148639: libarchive vulnerabilities CVE-2024-48957 and CVE-2024-48958
Security Advisory Description CVE-2024-48957 executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. CVE-2024-48958 executefilterdelta in archivereadsupportformatrar.c in libarchive befo...
Fedora 41 : libarchive (2024-225908d17c)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-225908d17c advisory. Automatic update for libarchive-3.7.4-2.fc41. Changelog Thu Jun 6 2024 Lukas Javorsky - 3.7.4-2 - Fix CVE-2024-20696 - Resolves: rhbz2290449 Tenable has...
Fedora 37 : libarchive (2022-e15be0091f)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e15be0091f advisory. Fix for CVE-2022-36227 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Photon OS 5.0: Libarchive PHSA-2024-5.0-0400
An update of the libarchive package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0400. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
The vulnerability of the execute_filter_audio function in the archive_read_support_format_rar.c library of the Libarchive library, which involves reading beyond the permissible buffer data limits, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the executefilteraudio function in the archivereadsupportformatrar.c component of the Libarchive library relates to reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, an...
The vulnerability of the execute_filter_delta function in the archive_read_support_format_rar.c component of the Libarchive library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the executefilterdelta function in the archivereadsupportformatrar.c component of the Libarchive library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, an...
Mageia: Security Advisory (MGASA-2024-0363)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated libarchive packages fix security vulnerability
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if a specially crafted RAR archive is processed. CVE-2024-20696...
MGASA-2024-0363 Updated libarchive packages fix security vulnerability
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if a specially crafted RAR archive is processed. CVE-2024-20696...
