CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-2101)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2020-2101)

According to the version of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. Fo...

libarchive:libarchive_fuzzer: Crash in lzma_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5182080345178112 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x632000030000 Crash State: lzmadecode decodebuffer...

Arbitrary Code Execution

libarchive is vulnerable to arbitrary code execution. The vulnerability exists as archivereadsupportformatrar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header such as a header size of zero, leading to a SIGSEGV or possibly unspecified other impact...

About the security content of iOS 10.2.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-1779)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : libarchive (EulerOS-SA-2020-1779)

According to the version of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or...

Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: archivereadsupportformatlha.c in libarchive before 3.4.1 does not ensure valid sizes for UTF-16 input, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted LHA archive...

MGASA-2020-0253 Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: archivereadsupportformatlha.c in libarchive before 3.4.1 does not ensure valid sizes for UTF-16 input, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted LHA archive...

Fedora 31 : libarchive (2020-d8278fe24d)

The remote Fedora 31 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-d8278fe24d advisory. Rebase to version 3.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora: Security Advisory for libarchive (FEDORA-2020-d8278fe24d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: libarchive-3.4.3-1.fc31

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Fedora 32 : libarchive (2020-94211d0a7d)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-94211d0a7d advisory. Rebase to version 3.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-1607)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2020-1607)

According to the version of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. Fo...

Fedora: Security Advisory for libarchive (FEDORA-2020-94211d0a7d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: libarchive-3.4.3-1.fc32

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Critical Photon OS Security Update - PHSA-2020-0294

Updates of 'salt3', 'salt', 'ruby' packages of Photon OS have been released...

EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2020-1569)

According to the version of the libarchive package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect...