3204 matches found
USN-5374-1: libarchive vulnerability
It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to expose sensitive information...
USN-5374-1 libarchive vulnerability
It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to expose sensitive information...
Out-of-bounds read vulnerability in libarchive
libarchive is a multi-format archive and compression library. An out-of-bounds read vulnerability exists in libarchive, which can be exploited by an attacker to cause an out-of-bounds read...
Ubuntu 20.04 LTS : libarchive vulnerability (USN-5374-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5374-1 advisory. It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to expose sensitive information. Tenable ha...
Arbitrary File Write
libarchive is vulnerable to arbitrary file write. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would...
CVE-2021-36976 affecting package libarchive for versions less than 3.6.0-1
CVE-2021-36976 affecting package libarchive for versions less than 3.6.0-1. An upgraded version of the package is available that resolves this issue...
[slackware-security] libarchive
New libarchive packages are available for Slackware 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libarchive-3.6.1-i586-1slack15.0.txz: Upgraded. This is a bugfix and security release. Security fixes: 7zip reader: f...
The vulnerability in the implementation of the zipx_lzma_alone_init() function of the libarchive library allows a attacker to disclose protected information or cause service failures.
The vulnerability of the implementation of the zipxlzmaaloneinit function in the libarchive library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information or cause service failures...
Slackware Linux 14.1 / 14.2 / 15.0 / current libarchive Vulnerability (SSA:2022-098-01)
The version of libarchive installed on the remote host is prior to 3.6.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-098-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
...
CVE-2022-26280
An out-of-bounds read flaw was found in libarchive. This flaw allows an attacker who can supply a specially crafted zip file to libarchive to cause an out-of-bounds read in programs linked with libarchive, using the LZMA zip functionality. The consequences depend on the specific program linked wi...
Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2022-1353)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-26280
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...
DEBIAN-CVE-2022-26280
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...
ALPINE-CVE-2022-26280
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...
AZL-9210 CVE-2022-26280 affecting package libarchive for versions less than 3.6.1-1
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...
Out-of-bounds
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...
CVE-2022-26280
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...
