Updated pache-commons-compress packages fix security vulnerabilities

A flaw was found in Apache Commons Compress versions 1.11 to 1.15. A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount ...

Fedora 28 : perl-Archive-Tar (2018-4e088b6d7c)

This release fixes CVE-2018-12015 vulnerability a directory traversal. It also fixes creating a file with a trailing white space on the file name. It also allows to archive absolute path names and it speeds up extracting large archives. Note that Tenable Network Security has extracted the precedi...

Fedora 28 : perl-Archive-Zip (2018-6abfa0012f)

This release fixes a directory and symbolic link traversal vulnerability in Archive::Zip::Archive Perl module that allows an attacker to writite into an arbitrary file accesible by a local user. Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLED15 / SLES15 Security Update : libarchive (SUSE-SU-2018:3571-1)

This update for libarchive fixes the following issues : CVE-2017-14501: An out-of-bounds read flaw existed in parsefileinfo in archivereadsupportformatiso9660.c when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader. bsc1059139 CVE-2017-14502: readhead...

Node.js third-party modules: [bower] Arbitrary File Write through improper validation of symlinks while package extraction

I would like to report file write in arbitrary locations via install command in bower It allows attackers to write arbitrary files when a malicious package is extracted. Module module name: bower version: 1.8.4 npm page: https://www.npmjs.com/package/bower Module Description Bower offers a generi...

UBUNTU-CVE-2018-20623

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the processarchive function in readelf.c via a crafted ELF file...

DEBIAN-CVE-2018-1000888

PEAR ArchiveTar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the ArchiveTar class. There are several file operations with $vheader'filename' as parameter such as fileexists, isfile, isdir, etc. When extract is called without a specific prefix path, we can trigger...

UBUNTU-CVE-2018-1000888

PEAR ArchiveTar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the ArchiveTar class. There are several file operations with $vheader'filename' as parameter such as fileexists, isfile, isdir, etc. When extract is called without a specific prefix path, we can trigger...

The vulnerability of the RubyGems package management system, related to the possibility of cross-site scripting, allows a hacker to cause a service failure.

The vulnerability of the RubyGems package management system is related to the possibility of cross-site scripting execution. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted gem archive...

Design/Logic Flaw

DISPUTED An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false. NOTE: the software maintainer disputes the significance of this repo...

CVE-2018-20437

An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false. NOTE: the software maintainer disputes the significance of this report becaus...

CVE-2018-20437

An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false. NOTE: the software maintainer disputes the significance of this report becaus...

ESTsoft ALZip Buffer Overflow Vulnerability

ESTsoft ALZip is a compression tool from ESTsoft Korea. A stack overflow vulnerability exists in ESTsoft ALZip 10.76.0.0 and earlier versions, which stems from the program failing to properly check boundaries. The vulnerability can be exploited to execute arbitrary code by tricking the user into...

CVE-2018-5196

Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution...

CVE-2018-5196

Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution...

CVE-2018-5196 Alzip Stack Overflow Vulnerability

Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution...

CVE-2018-5196

The CVE-2018-5196 entry affects ESTsoft ALZip (versions 10.76.0.0 and earlier). The root cause is a stack overflow caused by improper bounds checking when handling specially crafted LZH archives. Exploitation wording from multiple sources indicates that convincing a user to open a malicious LZH f...

Libarchive Null Pointer Dereference Vulnerability

Libarchive is an open source, C programming library under the BSD license that provides streaming access to a variety of different archive formats. A null pointer dereference vulnerability exists in the ACL parser archiveaclfromtextl in libarchive/archiveacl.c in libarchive, which can be exploite...

RDF4J Path Traversal Vulnerability

RDF4J is a Java-based open source framework for querying and analyzing RDF data . A path traversal vulnerability exists in RDF4J version 2.4.2, which can be exploited to overwrite arbitrary files with the help of a ZIP archive file...

CVE-2018-18399

SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...