CVE-2024-20696

libarchive-harness-win - CVE-2024-20696 博客文章：https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/ 一个针对 CVE-2024-20696 的简单测试框架 1. 下载你要测试的 archiveint.dll 版本 2. 在这里更新路径 3. 更新文件路径以指向要处理的测试归档文件。示例文件为 bsdtar-invalid-read.rar...

CVE-2025-64031

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...

CVE-2025-64031

A flaw was found in libarchive, a data archiving library. This vulnerability, a heap-based buffer overflow in the gzip writer, occurs when handling the original-filename field. While exploitation requires a specific, marginally plausible scenario where an untrusted source provides the filename, a...

CVE-2025-64031

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...

CVE-2025-64031

libarchive versions 3.8.x before 3.8.2 (affecting bsdtar ) contain a strcpy heap-based buffer overflow in the gzip writer, triggered via the original-filename field passed to archive_compressor_gzip_open in archive_write_add_filter_gzip.c. The CVSS 3.1 score is 2.5 (Low) with a local attack vecto...

EUVD-2025-210902

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archivecompressorgzipopen in archivewriteaddfiltergzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which...

PT-2026-90992

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive compressor gzip open in archive write add filter gzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in...

CVE-2024-55587

CVE-2024-55587 このリポジトリは、PythonライブラリlibarchiveにおけるCVE-2024-55587脆弱性の概念実証です。 generatezipファイルは、libarchiveのextractallメソッドにおける安全でないファイル抽出を悪用する悪意のあるzipファイルを作成します。 vulnerablezipは、脆弱なコードの単なる例です。...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 堆越界读取（含 iOS 18.5 真机验证） libarchive 的 RAR v4 过滤器路径（copyfromlzsswindow）中存在可控的堆越界读取 / 内存泄露 。本仓库端到端复现了该漏洞：本地 ASan、一个从零编写的 RAR v4 编码器（可调节泄露大小），以及 iOS 18.5 上的真机 演示（使用手机自带的系统 libarchive.2.dylib）。 漏洞 ：parsefilter 读取过滤器 blocklength（RAR-VM 字节码，最多 32 位），随后 copyfromlzsswindow...

RHBA-2022:3897 Red Hat Bug Fix Advisory: new packages: libarchive

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.37 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

CVE-2025-59284-PoC

CVE-2025-59284 の PoC CVE-2025-59284 libarchive エクスプロイトの概念実証 使用方法： root@kitploit: Usage: Poc.py e.g python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar 技術解説： https://sec-fault.com/blog/cve-2025-59284/ 動画...

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2026-3349)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf point...

ROOT-OS-ALPINE-323-CVE-2026-5121 CVE-2026-5121 in libarchive - Patched by Root

Root has patched CVE-2026-5121 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-4424 CVE-2026-4424 in libarchive - Patched by Root

Root has patched CVE-2026-4424 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...

Alibaba Cloud Linux 3 : 0258: libarchive (ALINUX3-SA-2026:0258)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0258 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14164: A double free issue has been...

[SECURITY] [DLA 4762-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 31, 2026 https://wiki.debian.org/LTS -...

Debian dla-4762 : libarchive-dev - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4762 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected]...

Unity Linux 20.1070e Security Update: libarchive (UTSA-2026-104945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104945 advisory. A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryptio...

Astra Linux – Vulnerability in libarchive

An improper link resolution flaw during the extraction of an archive can cause changes to the access control list ACL of the target of the link. An attacker may provide a malicious archive to a victim user, triggering this flaw when the victim tries to extract the archive. A local attacker may...