Lucene search
+L

7483 matches found

Debian
Debian
added 2018/12/21 10:54 p.m.112 views

[SECURITY] [DLA 1612-1] libarchive security update

Package : libarchive Version : 3.1.2-11+deb8u6 CVE ID : CVE-2018-1000877 CVE-2018-1000878 Debian Bug : 916964 916963 Daniel Axtens discovered a double-free and use-after-free vulnerability in libarchives RAR decoder that can result in a denial-of-service application crash or may have other...

8.8CVSS9.3AI score0.04575EPSS
SaveExploits0
CNVD
CNVD
added 2018/12/21 12:0 a.m.3 views

Libarchive Reuse After Release Vulnerability

Libarchive is an open source, C programming library under the BSD license that provides streaming access to a variety of different archive formats. A post-release reuse vulnerability exists in the RAR decoder in libarchive libarchive/archivereadsupportformatrar.c, which can be exploited to cause ...

8.8CVSS6.8AI score0.04449EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/20 5:29 p.m.5 views

DEBIAN-CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS8.1AI score0.04449EPSS
SaveExploits0References1
NVD
NVD
added 2018/12/20 5:29 p.m.19 views

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS8.5AI score0.04449EPSS
SaveExploits0References15
NVD
NVD
added 2018/12/20 5:29 p.m.24 views

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS8.4AI score0.04575EPSS
SaveExploits0References15
OSV
OSV
added 2018/12/20 5:29 p.m.26 views

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS6.4AI score
SaveExploits0References15
OSV
OSV
added 2018/12/20 5:29 p.m.19 views

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS6.5AI score
SaveExploits0References15
Prion
Prion
added 2018/12/20 5:29 p.m.26 views

Double free

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

6.8CVSS8.3AI score0.04575EPSS
SaveExploits0References15Affected Software7
Prion
Prion
added 2018/12/20 5:29 p.m.24 views

Design/Logic Flaw

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

6.8CVSS8.4AI score0.04449EPSS
SaveExploits0References15Affected Software8
CVE
CVE
added 2018/12/20 5:0 p.m.244 views

CVE-2018-1000877

CVE-2018-1000877 is a double-free in libarchive’s RAR decoder (parse_codes in archive_read_support_format_rar.c) that can crash the process or enable a DoS when a victim opens a specially crafted RAR file. The issue occurs when realloc(rar->lzss.window, new_size) is invoked with new_size = 0. ...

8.8CVSS8.3AI score0.04575EPSS
SaveExploits0References15Affected Software1
Cvelist
Cvelist
added 2018/12/20 5:0 p.m.35 views

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.5AI score0.04449EPSS
SaveExploits0References15
Cvelist
Cvelist
added 2018/12/20 5:0 p.m.30 views

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.4AI score0.04575EPSS
SaveExploits0References15
CVE
CVE
added 2018/12/20 5:0 p.m.212 views

CVE-2018-1000878

The CVE-2018-1000878 entry concerns libarchive’s RAR decoder. A Use After Free in archive_read_support_format_rar.c can crash the process or enable denial-of-service when opening a specially crafted RAR file; exploitation appears to require user interaction (opening the archive). Affected upstrea...

8.8CVSS8.4AI score0.04449EPSS
SaveExploits0References15Affected Software1
UbuntuCve
UbuntuCve
added 2018/12/20 12:0 a.m.36 views

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS6.7AI score0.04575EPSS
SaveExploits0References4
OSV
OSV
added 2018/12/20 12:0 a.m.5 views

UBUNTU-CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS6.6AI score0.04575EPSS
SaveExploits0References5
OSV
OSV
added 2018/12/20 12:0 a.m.7 views

UBUNTU-CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS6.7AI score0.04449EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2018/12/20 12:0 a.m.36 views

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS6.7AI score0.04449EPSS
SaveExploits0References4
exploitpack
exploitpack
added 2018/12/20 12:0 a.m.49 views

Base64 Decoder 1.1.2 - Local Buffer Overflow (SEH)

Base64 Decoder 1.1.2 - Local Buffer Overflow SEH !/usr/bin/env python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Base64 Decoder 1.1.2 - Local Buffer Overflow SEH Date: 12-20-18 Vulnerable Software: Base64 Decoder 1.1.2 Vendor Homepage: http://4mhz.de/b64dec.html Version: 1.1.2 Software...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/12/20 12:0 a.m.37 views

Base64 Decoder 1.1.2 - Local Buffer Overflow (SEH)

!/usr/bin/env python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Base64 Decoder 1.1.2 - Local Buffer Overflow SEH Date: 12-20-18 Vulnerable Software: Base64 Decoder 1.1.2 Vendor Homepage: http://4mhz.de/b64dec.html Version: 1.1.2 Software Link:...

5.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.8 views

PT-2022-11255 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A Segmentation fault exists caused by a null pointer dereference in the naludmx create avc decoder config function in reframe nalu.c when using mp4box, which causes a denial of service. Recommendations...

9.8CVSS7.6AI score0.04615EPSS
SaveExploits150References372
Rows per page
Query Builder