Mandriva Linux Security Advisory : libarchive (MDVSA-2011:190)

Two heap-based buffer overflow flaws were discovered in libarchive. If a user were tricked into expanding a specially crafted ISO 9660 CD-ROM image or tar archive with an application using libarchive, it could cause the application to crash or, potentially, execute arbitrary code with the...

CVE-2011-1777

Multiple buffer overflows in the 1 heapaddentry and 2 relocatedir functions in archivereadsupportformatiso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted ISO9660 image...

CVE-2011-1778

Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TAR archive...

RHEL 6 : libarchive (RHSA-2011:1507)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1507 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar and cpio. It can also...

Libarchive multiple security issues

Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TAR archive...

Libarchive multiple security issues

Multiple buffer overflows in the 1 heapaddentry and 2 relocatedir functions in archivereadsupportformatiso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted ISO9660 image...

Moderate: Red Hat Security Advisory: libarchive security update

Updated libarchive packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libarchive security update

2.8.3-3 - Security fixes CVE-2011-1777, CVE-2011-1778 739939...

Ubuntu: Security Advisory (USN-700-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200708-03 (libarchive)

The remote host is missing updates announced in advisory GLSA 200708-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200708-03 (libarchive)

The remote host is missing updates announced in advisory GLSA 200708-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: libarchive

The remote host is missing an update to the system as announced in the referenced advisory. VID 792bc222-c5d7-11db-9f82-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-07:05.libarchive.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:05.libarchive.asc ADV FreeBSD-SA-07:05.libarchive.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 20...

FreeBSD Ports: libarchive

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Security Advisory (FreeBSD-SA-07:05.libarchive.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:05.libarchive.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

libarchive does not properly terminate loop

Overview libarchive contains a vulnerability that may allow an attacker to cause a denial of service. Description The libarchive library provides an interface for reading and writing archive files.There is a vulnerability in libarchive that occurs when it parses the pax interchange format. If an...

Debian: Security Advisory (DSA-1455-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1455-1 : libarchive - denial of service

Several local/remote vulnerabilities have been discovered in libarchive1, a single library to read/write tar, cpio, pax, zip, iso9660 archives. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3641 It was discovered that libarchive1 would miscompute...

DSA-1455-1 libarchive

Bulletin has no description...

openSUSE 10 Security Update : libarchive (libarchive-3982)

Specially crafted tar-archives could cause programs based on libarchive to crash, to run into an enless loop or potentially to even execute arbitrary code CVE-2007-3641, CVE-2007-3644, CVE-2007-3645. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...