RHEL 8 : libarchive (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: heap-based buffer overflow in archivestringappendfromwcs function in archivestring.c...

Photon OS 3.0: Libarchive PHSA-2020-3.0-0160

An update of the libarchive package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid142658;...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

CVE-2020-21674

CVE-2020-21674 : The vulnerability is a heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) of libarchive. The affected code path is in libarchive-3.4.1dev, potentially permitting remote attackers to cause a denial of service via a crafted archive file. Notes from th...