Microsoft Windows Libarchive Security Vulnerability

Microsoft Windows Libarchive is a C library and command line tool from Microsoft Corporation USA for reading and... A security vulnerability exists in Microsoft Windows Libarchive. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

PT-2024-1100 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows libarchive affected versions not specified Description: The vulnerability is related to insufficient input validation in the libarchive library of the Windows operating system. It allows remote attackers to execute arbitrary code and...

Advisory ROSA-SA-2023-2308

Software: libarchive 3.3.3 OS: ROSA Virtualization 2.1 packageevrstring: libarchive-3.3.3.3-5.0.1.rv3.src.rpm CVE-ID: CVE-2018-1000879 BDU-ID: 2020-01816 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the archiveaclfromtextlins function of the libarchive library is related to NULL pointer...

Low: libarchive

Issue Overview: In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or, in some cases, even arbitrary code execution. CVE-2022-36227 Affected...

Amazon Linux 2 : libarchive (ALAS-2023-2364)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2364 advisory. In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer...

Amazon Linux 2 : libarchive (ALAS-2023-2374)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2374 advisory. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...

Medium: libarchive

Issue Overview: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extra...

Rocky Linux 9 : libarchive (RLSA-2022:5252)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5252 advisory. - Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit. CVE-2022-26280 Note that Nessus has not tested for this...

Rocky Linux 8 : libarchive (RLSA-2022:0892)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0892 advisory. - An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the link. An attacker m...

F5 Networks BIG-IP : libarchive vulnerability (K50543013)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K50543013 advisory. - An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers...

Low: libarchive

Issue Overview: No CVE associated with this advisory Affected Packages: libarchive Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update libarchive or yum upda...

Amazon Linux 2 : libarchive (ALAS-2023-2279)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2279 advisory. In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer...

GLSA-202309-14 : libarchive: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-14 libarchive: Multiple Vulnerabilities - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a...

libarchive: Multiple Vulnerabilities

Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description Multiple vulnerabilities have been discovered in libarchive. Please review the CVE identifiers referenced...

[slackware-security] libarchive

New libarchive packages are available for Slackware 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libarchive-3.7.2-i586-1slack15.0.txz: Upgraded. This update fixes multiple security vulnerabilities in the PAX writer...

Slackware Linux 14.1 / 14.2 / 15.0 / current libarchive Vulnerability (SSA:2023-256-02)

The version of libarchive installed on the remote host is prior to 3.7.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-256-02 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Slackware: Security Advisory (SSA:2023-256-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Python is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP and WebSphere Liberty CVE-2020-10735, CVE-2022-45061. LibTiff is used by IBM Robotic Process Automation for Cloud Pak as part of .NET Core and Watson NLP CVE-2022-3627, CVE-2022-3970. cURL libcurl is used...

Oracle Linux 7 : libarchive (ELSA-2019-2298)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2298 advisory. - fix out-of-bounds read within lhareaddatanone CVE-2017-14503 - fix crash on crafted 7zip archives CVE-2019-1000019 Tenable has extracted the precedin...

Oracle Linux 8 : libarchive (ELSA-2019-3698)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3698 advisory. - fix out-of-bounds read within lhareaddatanone CVE-2017-14503 - fix crash on crafted 7zip archives CVE-2019-1000019 Tenable has extracted the precedin...