3314 matches found
CVE-2024-20696
libarchive-harness-win - CVE-2024-20696 Entrada de blog: https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/ Un sencillo banco de pruebas para CVE-2024-20696 1. Descargue una versión de archiveint.dll que desee probar 2. Actualice la ruta aquí 3...
CVE-2025-59284-PoC
CVE-2025-59284-PoC 针对CVE-2025-59284 libarchive漏洞的利用概念验证 用法: root@kitploit: Usage: Poc.py 例如 python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar 技术文章: https://sec-fault.com/blog/cve-2025-59284/ 视频...
cve-2025-5915
CVE-2025-5915 — lectura fuera de límites de heap en RAR v4 de libarchive con prueba en dispositivo iOS 18.5 Una lectura fuera de límites de heap / divulgación de memoria controlada en la ruta del filtro RAR v4 de libarchive copyfromlzsswindow. Este repositorio la reproduce de principio a fin: ASa...
ROOT-OS-ALPINE-323-CVE-2026-4424 CVE-2026-4424 in libarchive - Patched by Root
Root has patched CVE-2026-4424 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-5121 CVE-2026-5121 in libarchive - Patched by Root
Root has patched CVE-2026-5121 in the libarchive package for Root:Alpine:3.23. Multiple fixed versions available...
CVE-2024-55587
CVE-2024-55587 このリポジトリは、PythonライブラリlibarchiveにおけるCVE-2024-55587脆弱性の概念実証です。 generatezipファイルは、libarchiveのextractallメソッドにおける安全でないファイル抽出を悪用する悪意のあるzipファイルを作成します。 vulnerablezipは、脆弱なコードの単なる例です。...
Alibaba Cloud Linux 3 : 0258: libarchive (ALINUX3-SA-2026:0258)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0258 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14164: A double free issue has been...
[SECURITY] [DLA 4762-1] libarchive security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 31, 2026 https://wiki.debian.org/LTS -...
Debian dla-4762 : libarchive-dev - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4762 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4762-1 [email protected]...
Unity Linux 20.1070e Security Update: libarchive (UTSA-2026-104945)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104945 advisory. A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryptio...
RHBA-2022:3897 Red Hat Bug Fix Advisory: new packages: libarchive
Bulletin has no description...
Astra Linux – Vulnerability in libarchive
An improper link resolution flaw during the extraction of an archive can cause changes to the access control list ACL of the target of the link. An attacker may provide a malicious archive to a victim user, triggering this flaw when the victim tries to extract the archive. A local attacker may...
Astra Linux – Vulnerability in libarchive
In libarchive versions 3.4.1 through 3.5.1, there is a use-after-free in the copystring function called from douncompressblock and processblock...
Astra Linux – Vulnerability in libarchive
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archivereaddata processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents further progress. This...
Astra Linux – Vulnerability in libarchive
A vulnerability has been identified in the libarchive library. This flaw can lead to an over-reading of the heap buffer, as the size of a filter block may exceed the Lempel-Ziv-Storer-Schieber LZSS window. This means that the library may attempt to read beyond the allocated memory buffer, which c...
Astra Linux – Vulnerability in libarchive
A vulnerability has been identified in the libarchive library. This flaw involves an “off-by-one” calculation error when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. Although seemingly minor, such an overflow can corrupt adjacent memory, resulting in...
Astra Linux – Vulnerability in libarchive
A vulnerability was discovered in libarchive up to version 3.7.7. It has been classified as problematic. This issue affects the function list of the bsdunzip.c file. The vulnerability leads to a null pointer dereference. The attack can be launched on the local host. The exploit has been disclosed...
Astra Linux – Vulnerability in libarchive
An improper link resolution flaw can occur during the extraction of an archive, resulting in changes to the mode, times, access control lists, and flags of a file within the archive. An attacker may provide a malicious archive to a victim user, triggering this flaw when the victim attempts to...
Astra Linux – Vulnerability in libarchive
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are passed into bsdtar, potentially allowing for reading beyond the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior,...
Astra Linux – Vulnerability in libarchive
A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, allowin...