3204 matches found
MGASA-2016-0318 Updated libarchive packages fix security vulnerability
The updated packages fix several security vulnerabilities: A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with...
CVE-2016-4736
libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...
CVE-2016-4736
libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...
Memory corruption
libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...
CVE-2016-4736
libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...
CVE-2016-4736
CVE-2016-4736 : Apple OS X libarchive before 10.12 is affected. A crafted file can trigger memory corruption, leading to a denial of service (and potentially other impact). Affected component: libarchive in OS X. Root cause: memory corruption via crafted archive handling. Mitigation: apply the ma...
[SECURITY] [DSA 3677-1] libarchive security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3677-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 25, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3677-1] libarchive security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3677-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 25, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3677-1 (libarchive - security update)
Several vulnerabilities were discovered in libarchive, a multi-format archive and compression library, which may lead to denial of service memory consumption and application crash, bypass of sandboxing restrictions and overwrite arbitrary files with arbitrary data from an archive, or the executio...
DSA-3677-1 libarchive - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3677-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
macOS < 10.12 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...
Libarchive Information Disclosure Vulnerability
libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive, which can be exploited by an attacker to overwrite arbitrary files...
CVE-2016-7166
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...
DEBIAN-CVE-2016-7166
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...
CVE-2016-7166
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...
CVE-2016-6250
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...
CVE-2016-6250
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...
ALPINE-CVE-2016-6250
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...