Ubuntu 22.04 LTS / 23.10 / 24.04 LTS : libarchive vulnerability (USN-6805-1)

The remote Ubuntu 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6805-1 advisory. It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to execute arbitrar...

RHEL 9 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libarchive: Race condition in multi-threaded use of archivewritediskheader on posix based systems CVE-2023-30571 No...

RHEL 8 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: heap-based buffer overflow in archivestringappendfromwcs function in archivestring.c...

RHEL 7 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: directory traversal in bsdcpio CVE-2015-2304 - libarchive: Out of bounds read in...

RHEL 6 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: directory traversal in bsdcpio CVE-2015-2304 - libarchive: Infinite recursion in...

[SECURITY] Fedora 40 Update: libarchive-3.7.2-4.fc40

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Fedora 40 : libarchive (2024-cbb72aad83)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-cbb72aad83 advisory. Automatic update for libarchive-3.7.2-4.fc40. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2024-26256

A flaw was found in the libarchive library. A heap-based buffer overflow in the executefiltere8 function in the libarchive/archivereadsupportformatrar.c file can be triggered when a specially crafted RAR archive is processed, causing a crash to the application linked to the library, and resulting...

Advisory ROSA-SA-2024-2421

Software: libarchive 3.3.3 OS: ROSA Virtualization 2.1 packageevrstring: libarchive-3.3.3 CVE-ID: CVE-2019-11463 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A memory leak in archivereadformatzipcleanup in archivereadsupportformatzip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial...

RHEL 8 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: Improper input validation in WARC parser resulting in a denial of service CVE-2018-1000880 -...

RHEL 6 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: Off-by-one error in the readheader function CVE-2017-14502 - libarchive: NULL pointer...

RHEL 7 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: Out of bounds read in lhareadfileheader1 function CVE-2017-5601 - libarchive: NULL pointer...

Mageia: Security Advisory (MGASA-2024-0154)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libarchive packages fix security vulnerability

Remote Code Execution Vulnerability. CVE-2024-26256...

MGASA-2024-0154 Updated libarchive packages fix security vulnerability

Remote Code Execution Vulnerability. CVE-2024-26256...

PT-2024-7937 · Unknown +6 · Libarchive +6

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.7.5 Description: The issue is related to the execute filter delta function in the archive read support format rar.c component of the libarchive library, which allows out-of-bounds access to data when reading a...

PT-2024-7942 · Unknown +5 · Libarchive +5

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.7.5 Description: The issue is related to out-of-bounds access in the execute filter audio function within the archive read support format rar.c component of the libarchive library. This can be exploited via a...

PT-2025-24555

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw has been identified in the libarchive library involving an integer overflow. This issue can be triggered when processing a Web Archive WARC file that claims to have more than INT64...

Slackware: Security Advisory (SSA:2024-116-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] libarchive

New libarchive packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libarchive-3.7.3-i586-2slack15.0.txz: Rebuilt. Patched an out-of-bound error in the rar e8 filter that could allow for the...