CVE-2022-36227 affecting package libarchive 3.6.1-1

CVE-2022-36227 affecting package libarchive 3.6.1-1. A patched version of the package is available...

OESA-2022-2126 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

OESA-2022-2123 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

OESA-2022-2124 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

SUSE: Security Advisory (SUSE-SU-2022:4296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : libarchive (SUSE-SU-2022:4296-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4296-1 advisory. - CVE-2022-36227: Fixed potential NULL pointer dereference in archivewriteallocatefilter bsc1205629. Tenable has extracted the preceding...

SUSE-SU-2022:4296-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2022-36227: Fixed potential NULL pointer dereference in archivewriteallocatefilter bsc1205629...

In libarchive before 3.6.2 the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances when NULL is equivalent to the 0x0 memory address and privileged code can access it then writing or reading memory is possible which may lead to code execution."

...

Binary vulnerability in libarchive (CNVD-2022-90746)

libarchive is a multi-format archive and compression library. A binary vulnerability exists in libarchive, which can be exploited by attackers to execute arbitrary code...

SUSE: Security Advisory (SUSE-SU-2022:4209-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Libarchive Code Execution Vulnerability

libarchive is a multi-format archive and compression library. libarchive A code execution vulnerability exists in libarchive version 3.6.1, which stems from a failure to check for errors after calling the calloc function, i.e., if the function fails, the calloc function returns a NULL pointer,...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2022:4209-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4209-1 advisory. - CVE-2022-36227: Fixed potential NULL pointer dereference in archivewriteallocatefilter bsc1205629...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2022:4202-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4202-1 advisory. - CVE-2022-36227: Fixed potential NULL pointer dereference in archivewriteallocatefilter bsc1205629...

Debian: Security Advisory (DLA-3202-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:4202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:4209-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2022-36227: Fixed potential NULL pointer dereference in archivewriteallocatefilter bsc1205629...

SUSE-SU-2022:4202-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2022-36227: Fixed potential NULL pointer dereference in archivewriteallocatefilter bsc1205629...

Debian dla-3202 : bsdcpio - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3202 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3202-1 [email protected]...

CVE-2022-36227

A flaw was found in libarchive. A missing check of the return value of the calloc function can cause a NULL pointer dereference in an out-of-memory condition or when a memory allocation limit is reached, resulting in the program linked with libarchive to crash...

[SECURITY] [DLA 3202-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3202-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 22, 2022 https://wiki.debian.org/LTS -...