[SECURITY] Fedora 23 Update: libarchive-3.1.2-15.fc23

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

[SECURITY] Fedora 24 Update: libarchive-3.1.2-17.fc24

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Debian DSA-3574-1 : libarchive - security update

Rock Stevens, Andrew Ruef and Marcin 'Icewall' Noga discovered a heap-based buffer overflow vulnerability in the zipreadmacmetadata function in libarchive, a multi-format archive and compression library, which may lead to the execution of arbitrary code if a user or automated system is tricked in...

The vulnerability of the libarchive library, allowing a hacker to execute arbitrary code

The vulnerability of the libarchive library exists due to the incorrect definition of the compressed file size in the .zip format archive. Exploiting this vulnerability allows a malicious actor to insert arbitrary code into the file header, which will be executed with the privileges of the curren...

FreeBSD : libarchive -- RCE vulnerability (2b4c8e1f-1609-11e6-b55e-b499baebfeaf)

The libarchive project reports : Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 3574-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3574-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 10, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3574-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3574-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 10, 2016 https://www.debian.org/security/faq -...

DSA-3574-1 libarchive - security update

Bulletin has no description...

Debian Security Advisory DSA 3574-1 (libarchive - security update)

Rock Stevens, Andrew Ruef and Marcin Icewall Noga discovered a heap-based buffer overflow vulnerability in the zipreadmacmetadata function in libarchive, a multi-format archive and compression library, which may lead to the execution of arbitrary code if a user or automated system is tricked into...

Debian: Security Advisory (DSA-3574-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALPINE-CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

DEBIAN-CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

CVE-2016-1541

CVE-2016-1541 affects libarchive and describes a heap-based buffer overflow in the function zip_read_mac_metadata (archive_read_support_format_zip.c) in versions before 3.2.0. A crafted ZIP entry-size can allow an attacker to execute arbitrary code on the affected system. The issue is addressed u...

CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

UBUNTU-CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

libarchive Heap Buffer Overflow Vulnerability

libarchive is a multi-format archive and compression library. A heap buffer overflow vulnerability exists in libarchive version 3.1.2. An attacker can exploit this vulnerability to execute arbitrary code in the current user context by forcing the user to unzip a specially crafted file...

libarchive contains a heap-based buffer overflow due to improper input validation

Overview An attacker may be able to coerce a user into executing arbitrary code in the context of the current user by attempting to unzip a crafted zip file provided by the attacker. Description CWE-20: Improper Input Validation - CVE-2016-1541A crafted zip file can provide an incorrect compresse...

Libarchive zip zip_read_mac_metadata Code Execution Vulnerability

SUMMARY An exploitable heap overflow vulnerability exists in the zip archive decompression functionality of libarchive. A specially crafted zip file can cause memory corruption leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS libarchi...