CVE-2016-4300

A vulnerability was found in libarchive's handling of 7zip data. A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution...

CVE-2016-4301

An exploitable stack based buffer overflow vulnerability exists in the mtree parsedevice functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption and potential code execution in the context of the application...

libarchive RAR parser heap out-of-bounds read vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

libarchive TAR Parser Integer Overflow Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform undefined operations, resulting in an integer overflow...

libarchive mtree parser integer overflow vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's mtree parser. An attacker can exploit this vulnerability to perform undefined operations, resulting in an integer overflow...

libarchive TAR Parser Unauthorized Operation Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform an undefined operation, resulting in an invalid left shift...

libarchive ISO Parser Infinite Loop Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in the ISO parser of libarchive. An attacker could exploit this vulnerability to cause an infinite loop...

Slackware 14.1 / current : libarchive (SSA:2016-172-01)

New libarchive packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-172-01. The text itself is copyright C...

[slackware-security] libarchive

New libarchive packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libarchive-3.2.1-i486-1slack14.1.txz: Upgraded. This release fixes several critical bugs, including some with security implication...

libarchive RAR Parser Null Pointer Access Vulnerability

libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause null pointer access...

libarchive CAB Parser Null Pointer Access Vulnerability

libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's CAB parser. An attacker could exploit this vulnerability to cause a null pointer access...

Unspecified vulnerability in libarchive CAB parser

libarchive is a multi-format archive and compression library. An unspecified vulnerability exists in libarchive's CAB parser. An attacker could exploit this vulnerability to cause a memory overwrite...

libarchive CPIO Parser Memory Read Vulnerability

libarchive is a multi-format archive and compression library. A memory read vulnerability exists in libarchive's CPIO parser. An attacker can exploit this vulnerability to cause an invalid memory read...

Libarchive 7zip read_SubStreamsInfo Code Execution Vulnerability

SUMMARY An exploitable \heap overflow vulnerability exists in the 7zip readSubStreamsInfo functionality of libarchive. A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution. An attacker can send a malformed file to trigger this...

Libarchive mtree parse_device Code Execution Vulnerability

SUMMARY An exploitable stack based buffer overflow vulnerability exists in the mtree parsedevice functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption/code execution. An attacker can send a malformed file to trigger this...

Libarchive Rar RestartModel Code Execution Vulnerability

SUMMARY An exploitable heap overflow vulnerability exists in the Rar decompression functionality of libarchive. A specially crafted Rar file can cause a heap corruption eventually leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS...

UBUNTU-CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2016:1588-1)

This update for libarchive fixes the following issue : - Fix a heap-based buffer overflow CVE-2016-1541, bsc979005 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it ...

CVE-2016-4809

A vulnerability was found in libarchive. A specially crafted cpio archive containing a symbolic link to a ridiculously large target path can cause memory allocation to fail, resulting in any attempt to view or extract the archive crashing...