Lucene search
K

5 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:6 a.m.1 views

SUSE CVE-2019-19221

In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive...

5.3CVSS6.6AI score0.00661EPSS
Exploits1References4
CNVD
CNVD
added 2019/11/22 12:0 a.m.2 views

Libarchive Out-of-Bounds Read Vulnerability

libarchive is a multi-format archive and compression library. A buffer error vulnerability exists in the archivewstringappendfrommbs of the archivestring.c file in libarchive version 3.4.0. The vulnerability stems from a networked system or product performing operations in memory without properly...

5.5CVSS7.2AI score0.00661EPSS
Exploits1References1
OSV
OSV
added 2019/11/21 11:15 p.m.3 views

ALPINE-CVE-2019-19221

In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive...

5.5CVSS6.8AI score0.00661EPSS
Exploits1References1
OSV
OSV
added 2017/04/03 12:0 a.m.0 views

UBUNTU-CVE-2016-10209

The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file...

5.5CVSS6.8AI score0.0191EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2016/06/29 12:0 a.m.3 views

PT-2016-4060 · Libarchive +2 · Libarchive +2

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service crash via crafted cab files. This is related to "overlapping memcpy" in the archive string append function in archive string.c...

8.8CVSS6.8AI score0.11992EPSS
Exploits20References130
Rows per page
Query Builder