PT-2020-15381

Name of the Vulnerable Software and Affected Versions libarchive version 3.4.1dev Description A heap-based buffer overflow issue exists, allowing remote attackers to cause a denial of service via a crafted archive file. This issue affects users who downloaded the development code from GitHub, whi...

PT-2019-4148

Name of the Vulnerable Software and Affected Versions Libarchive version 3.4.0 Description The issue is related to an out-of-bounds read in the archive wstring append from mbs function in archive string.c. This occurs due to an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes when...