EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2019-1094)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerabili...

[SECURITY] Fedora 29 Update: libarchive-3.3.3-6.fc29

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Critical Photon OS Security Update - PHSA-2019-0216

Updates of 'gettext', 'python3', 'curl', 'libarchive', 'python2' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0004

Updates of 'libarchive' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-3.0-0004

Updates of 'libarchive' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0139

Updates of 'libarchive', 'openssh' packages of Photon OS have been released...

EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2019-1067)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerabili...

The vulnerability of the archive_wstring_append_from_mbs function in the libarchive library, which allows a hacker to cause a service failure.

The vulnerability of the archivewstringappendfrommbs function in the libarchive library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions using a specially created archive...

The vulnerability of the _warc_read function in the libarchive library, which allows a hacker to cause a service failure

The vulnerability of the warcread function in the libarchive library is related to input validation errors, which can lead to infinite execution and use of a disk from a small file. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the archive_read_format_iso9660_read_header function in the libarchive library allows a hacker to gain unauthorized access to information.

The vulnerability of the archivereadformatiso9660readheader function in the archivereadsupportformatiso9660.c library of the libarchive library is related to reading beyond the allowed boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to informati...

The vulnerability of the atol8 function in the libarchive library, which allows a hacker to cause a service failure

The vulnerability of the atol8 function archivereadsupportformatxar.c in the libarchive library is related to errors in processing empty strings, which can lead to buffer overflows. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the the_read_datanone function in the libarchive library allows a hacker to gain unauthorized access to information.

The vulnerability of the thereaddatanone function in the libarchive library is related to reading data beyond the allowed boundaries during data extraction. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information through a specially created lha archive...

The vulnerability of the archive_read_format_cab_read_header function in the libarchive library, which allows a hacker to cause a service failure.

The vulnerability of the archivereadformatcabreadheader function in the archivereadsupportformatcab.c library of the libarchive library is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created file...

The vulnerability of the read_header function in the libarchive library, which allows a hacker to gain unauthorized access to information

The vulnerability of the readheader function in the libarchive library is related to reading beyond the allowed boundaries due to an off-by-one error in the names of RAR archives in UTF-16 format. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to sensitive...

The vulnerability of the `archive_le32dec` function in the libarchive library, which allows a hacker to trigger a service failure.

The vulnerability of the archivele32dec function in the archiveendian.h header file of the libarchive library is related to overflow in the dynamic buffer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created file...

libarchive/libarchive_fuzzer: Heap-buffer-overflow in circular_memcpy

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5190348597362688 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflo...

USN-3884-1: libarchive vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that libarchive incorrectly handled certain 7zip files. An attacker could possibly use this issue to cause a denial of service...

MGASA-2019-0074 Updated libarchive packages fix security vulnerability

libarchive contains an out-of-bounds read vulnerability in 7zip decompression, archivereadsupportformat7zip.c, headerbytes that can result in a crash denial of service. This attack appears to be exploitable via the victim opening a specially crafted 7zip file CVE-2019-1000019. libarchive contains...

Updated libarchive packages fix security vulnerability

libarchive contains an out-of-bounds read vulnerability in 7zip decompression, archivereadsupportformat7zip.c, headerbytes that can result in a crash denial of service. This attack appears to be exploitable via the victim opening a specially crafted 7zip file CVE-2019-1000019. libarchive contains...

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service. An infinite loop condition in the functions readCE and parserockridge in archivereadsupportformatiso9660.c allows an attacker to cause a denial of service via a malicious ISO9660 file...