CVE-2024-20697

CVE-2024-20697 is a Windows libarchive remote code execution vulnerability. Concretely, the connected Nessus advisories from SUSE show that CVE-2024-20697 is fixed in libarchive across SUSE SLED15/SLES15/openSUSE 15 via advisories SUSE-SU-2024:2083-1 and SUSE-SU-2024:3940-1, with remediation guid...

CVE-2024-20697 Windows libarchive Remote Code Execution Vulnerability

...

CVE-2024-20697 Windows libarchive Remote Code Execution Vulnerability

...

CVE-2024-20696

CVE-2024-20696 affects Windows: a Remote Code Execution vulnerability in the libarchive component. The root cause is a heap-based buffer overflow in libarchive handling Windows inputs, enabling a local attacker with low privileges and user interaction to potentially execute code. The referenced m...

CVE-2024-20696 Windows libarchive Remote Code Execution Vulnerability

...

CVE-2024-20696

Windows libarchive Remote Code Execution Vulnerability...

CVE-2024-20696 Windows libarchive Remote Code Execution Vulnerability

...

CVE-2024-20696

Windows libarchive Remote Code Execution Vulnerability...

Windows libarchive Remote Code Execution Vulnerability

...

Windows libarchive Remote Code Execution Vulnerability

...

PT-2024-1124 · Microsoft +4 · Windows +4

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability is related to insufficient input validation in the libarchive library, which may allow remote attackers to execute arbitrary code. A heap-based out-of-bounds write...

Microsoft Windows Libarchive Security Vulnerability

Microsoft Windows Libarchive is a C library and command line tool from Microsoft Corporation USA for reading and... A security vulnerability exists in Microsoft Windows Libarchive. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

Microsoft Windows Libarchive Security Vulnerability

Microsoft Windows Libarchive is a C library and command line tool from Microsoft Corporation USA for reading and... A security vulnerability exists in Microsoft Windows Libarchive. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...

PT-2024-1100 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows libarchive affected versions not specified Description: The vulnerability is related to insufficient input validation in the libarchive library of the Windows operating system. It allows remote attackers to execute arbitrary code and...

Advisory ROSA-SA-2023-2308

Software: libarchive 3.3.3 OS: ROSA Virtualization 2.1 packageevrstring: libarchive-3.3.3.3-5.0.1.rv3.src.rpm CVE-ID: CVE-2018-1000879 BDU-ID: 2020-01816 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the archiveaclfromtextlins function of the libarchive library is related to NULL pointer...

Medium: libarchive

Issue Overview: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extra...

Low: libarchive

Issue Overview: In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or, in some cases, even arbitrary code execution. CVE-2022-36227 Affected...

Amazon Linux 2 : libarchive (ALAS-2023-2364)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2364 advisory. In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer...

Amazon Linux 2 : libarchive (ALAS-2023-2374)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2374 advisory. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...

Rocky Linux 9 : libarchive (RLSA-2022:5252)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5252 advisory. - Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit. CVE-2022-26280 Note that Nessus has not tested for this...