MiracleLinux 9 : libarchive-3.5.3-4.el9 (AXSA:2023-5392:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5392:01 advisory. libarchive: NULL pointer dereference in archivewrite.c CVE-2022-36227 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 7 : libarchive-3.1.2-14.el7 (AXSA:2020-4444:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4444:01 advisory. libarchive: use-after-free in archivereadformatrarreaddata when there is an error in the decompression of an archive entry CVE-2019-18408 Tenable has extract...

MiracleLinux 8 : libarchive-3.3.3-5.el8 (AXSA:2023-5565:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5565:02 advisory. libarchive: NULL pointer dereference in archivewrite.c CVE-2022-36227 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : libarchive-3.3.2-9.el8 (AXSA:2020-1004:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-1004:02 advisory. libarchive: out-of-bounds read in archivewstringappendfrommbs in archivestring.c CVE-2019-19221 Tenable has extracted the preceding description block directl...

MiracleLinux 4 : libarchive-2.8.3-7.AXS4 (AXSA:2016-659:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-659:01 advisory. Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, severa...

MiracleLinux 7 : libarchive-3.1.2-12.el7 (AXSA:2019-4084:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4084:01 advisory. libarchive: Double free in RAR decoder resulting in a denial of service CVE-2018-1000877 libarchive: Use after free in RAR decoder resulting in a...

MiracleLinux 7 : libarchive-3.1.2-10.el7 (AXSA:2016-661:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-661:01 advisory. Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, severa...

MiracleLinux 4 : libarchive-2.8.3-3.AXS4 (AXSA:2012-68:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2012-68:01 advisory. Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several...

MiracleLinux 8 : libarchive-3.3.3-6.el8_10 (AXSA:2025-10771:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10771:04 advisory. libarchive: Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c CVE-2025-5914 Tenable has extracted the preceding description block...

MiracleLinux 7 : libarchive-3.1.2-14.0.1.el7.AXS7 (AXSA:2025-10515:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10515:01 advisory. CVE-2025-5914: fix double free with over 4 billion nodes CVEs: CVE-2025-5914 A vulnerability has been identified in the libarchive library, specifically...

MiracleLinux 9 : libarchive-3.5.3-5.el9_6 (AXSA:2025-10567:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10567:02 advisory. libarchive: Buffer Overflow vulnerability in libarchive CVE-2025-25724 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 9 : libarchive-3.5.3-6.el9_6 (AXSA:2025-10772:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10772:05 advisory. libarchive: Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c CVE-2025-5914 Tenable has extracted the preceding description block...

MiracleLinux 7 : libarchive-3.1.2-14.0.2.el7.AXS7 (AXSA:2025-10751:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10751:03 advisory. CVE-2025-25724: fix buffer overflow vulnerability in libarchive CVEs: CVE-2025-25724 listitemverbose in tar/util.c in libarchive through 3.7.7 does not chec...

PT-2026-28808

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description An integer overflow exists in the zisofs block pointer allocation logic on 32-bit systems. A remote attacker can exploit this by providing a specially crafted ISO9660 image, potentially...

PT-2026-26289

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A heap out-of-bounds read issue exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. An...

PT-2026-25310

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw exists in the RAR5 archive decompression logic within the archive read data processing path of the libarchive library. Processing a specially crafted RAR5 archive can cause the...

PT-2026-26290

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description An issue exists in libarchive’s zisofs decompression logic. Improper validation of the pz log2 bs field read from ISO9660 Rock Ridge extensions can lead to undefined behavior. An attacker...

Unity Linux 20.1070e Security Update: libarchive (UTSA-2025-993342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993342 advisory. A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names...

Unity Linux 20.1070e Security Update: libarchive (UTSA-2025-993340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993340 advisory. A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading...

Unity Linux 20.1070e Security Update: libarchive (UTSA-2025-993343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993343 advisory. A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file...