libarchive: Heap-buffer-overflow in process_extra

Detailed report: https://oss-fuzz.com/testcase?key=5042257776345088 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000000780 Crash State:...

libarchive Denial of Service Vulnerability (CNVD-2017-10820)

libarchive is a multi-format archive and compression library. A security vulnerability exists in the 'archivewstringappendfrommbs' function in the archivestring.c file in libarchive version 3.2.2. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

Updated libarchive packages fix security vulnerabilities

The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. CVE-2016-10209 The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows...

MGASA-2017-0132 Updated libarchive packages fix security vulnerabilities

The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. CVE-2016-10209 The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows...

libarchive 'archive_read_format_cab_read_header' function denial of service vulnerability

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the archivereadsupportformatcab.c file archivereadformatcabreadheader function in libarchive version 3.2.2. A remote attacker can use this vulnerability to cause a denial of service buffer...

libarchive buffer overflow vulnerability (CNVD-2017-07011)

libarchive is a multi-format archive and compression library. A buffer overflow vulnerability exists in the archivele32dec function of the archiveendian.h file in libarchive version 3.2.2. A remote attacker can exploit this vulnerability to cause a denial of service buffer out-of-bounds read and...

Heap overflow

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

DEBIAN-CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

DEBIAN-CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10350

CVE-2016-10350 affects libarchive (archive_read_format_cab_read_header in archive_read_support_format_cab.c, libarchive 3.2.2). A crafted CAB file can trigger a heap-based buffer over-read, causing a denial of service (application crash). Public sources confirm multiple vendors/advisories (Debian...

CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10349

CVE-2016-10349 affects libarchive 3.2.2 and involves a heap-based buffer over-read in archive_endian.h (archive_le32dec). Remote files can crash the app (DoS). Public references include CVE details and Debian advisories. Remediation: upgrade libarchive to a fixed version; Debian lists 3.2.2-2+deb...

CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

EulerOS 2.0 SP1 : libarchive (EulerOS-SA-2016-1045)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system...