Lucene search
+L

3205 matches found

OSV
OSV
added 2025/02/24 2:15 p.m.4 views

ALPINE-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

5.5CVSS5.9AI score0.00335EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/24 2:15 p.m.6 views

AZL-57156 CVE-2025-1632 affecting package libarchive for versions less than 3.7.7-2

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

5.5CVSS4.8AI score0.00335EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/24 2:15 p.m.3 views

DEBIAN-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

5.5CVSS3.4AI score0.00335EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/24 2:15 p.m.9 views

UBUNTU-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

5.5CVSS5.9AI score0.00335EPSS
SaveExploits1References7
CVE
CVE
added 2025/02/24 1:31 p.m.297 views

CVE-2025-1632

Vulnerability CVE-2025-1632 affects libarchive up to 3.7.7, with a null pointer dereference in bsdunzip.c. Multiple connected sources (dev notices for libarchive-3.7.7 and packaging advisories) indicate exploitation is locally approachable and that a patch exists in newer builds (e.g., 3.7.7-2 an...

5.5CVSS6.6AI score0.00335EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/24 1:31 p.m.10 views

CVE-2025-1632 libarchive bsdunzip.c list null pointer dereference

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

4.8CVSS3.9AI score0.00335EPSS
SaveExploits1References4
OSV
OSV
added 2025/02/24 1:31 p.m.15 views

CVE-2025-1632 libarchive bsdunzip.c list null pointer dereference

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

4.8CVSS4.9AI score0.00335EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
added 2025/02/24 1:31 p.m.7 views

CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

5.5CVSS6.7AI score0.00335EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/02/24 1:31 p.m.30 views

CVE-2025-1632 libarchive bsdunzip.c list null pointer dereference

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

4.8CVSS0.00335EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2025/02/24 1:31 p.m.24 views

CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

5.5CVSS3.4AI score0.00335EPSS
SaveExploits1
Rosalinux
Rosalinux
added 2025/02/24 12:28 p.m.17 views

Advisory ROSA-SA-2025-2704

Software: libarchive 3.3.2003 OS: ROSA Virtualization 3.0 packageevrstring: libarchive-3.3.2003 CVE-ID: CVE-2022-36227 BDU-ID: 2022-07496 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the calloc function of the libarchive archiving library is related to pointer dereferencing errors...

9.8CVSS8AI score0.04575EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.5 views

libarchive 安全漏洞

libarchive is a multi-format archive and compression library open-sourced by libarchive. A security vulnerability exists in libarchive version 3.7.7 and earlier versions, which stems from a null pointer dereference issue contained in the bsdunzip.c file...

5.5CVSS4.5AI score0.00335EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/02/24 12:0 a.m.5 views

PT-2025-7714 · Unknown +6 · Libarchive +6

Name of the Vulnerable Software and Affected Versions: libarchive versions up to 3.7.7 Description: A problematic issue was found in libarchive, affecting the list function of the file bsdunzip.c. This issue leads to a null pointer dereference. The attack can be launched on the local host...

7.8CVSS3.7AI score0.00337EPSS
SaveExploits2References51
Veracode
Veracode
added 2025/02/19 5:11 a.m.8 views

Heap-based Buffer Over-read

libarchive.so is vulnerable to a Heap-based buffer over-read. The vulnerability is due to improper handling of truncated GNU long linknames in headergnulonglink, allowing an attacker to read out-of-bounds memory, potentially causing information disclosure or application crashes...

4CVSS6.3AI score0.00243EPSS
SaveExploits0References4Affected Software2
SUSE CVE
SUSE CVE
added 2025/02/18 5:12 a.m.4 views

SUSE CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS7.2AI score0.00243EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/02/17 6:24 p.m.10 views

CVE-2024-57970

A flaw was found in the libarchive library. A specially-crafted tar file may trigger a head-based buffer over-read condition due to incorrect handling of truncation in the middle of a long GNU linkname. This issue can cause an application crash leading to a denial of service...

4CVSS6.6AI score0.00243EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/17 12:0 a.m.10 views

UBUNTU-CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS7.3AI score0.00243EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/16 4:15 a.m.22 views

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS0.00243EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/16 4:15 a.m.4 views

ALPINE-CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS7.2AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/16 12:0 a.m.274 views

CVE-2024-57970

CVE-2024-57970 affects libarchive up to 3.7.7, introducing a heap-based buffer over-read in header_gnu_longlink when handling GNU long linknames within TAR archives. The root cause is improper truncation handling in the middle of a GNU long linkname, which can lead to memory read vulnerabilities ...

4CVSS7.1AI score0.00243EPSS
SaveExploits0References2
Rows per page
Query Builder