Lucene search
+L

3204 matches found

NVD
NVD
added 2018/12/20 5:29 p.m.22 views

CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

6.5CVSS7.2AI score0.03367EPSS
SaveExploits0References8
NVD
NVD
added 2018/12/20 5:29 p.m.23 views

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS8.4AI score0.04575EPSS
SaveExploits0References15
OSV
OSV
added 2018/12/20 5:29 p.m.2 views

DEBIAN-CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS6.8AI score0.04575EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/20 5:29 p.m.34 views

CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

6.5CVSS6.4AI score
SaveExploits0References8
OSV
OSV
added 2018/12/20 5:29 p.m.5 views

DEBIAN-CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS8.1AI score0.04449EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/20 5:29 p.m.17 views

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS6.5AI score
SaveExploits0References15
OSV
OSV
added 2018/12/20 5:29 p.m.25 views

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS6.4AI score
SaveExploits0References15
OSV
OSV
added 2018/12/20 5:29 p.m.2 views

DEBIAN-CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

6.5CVSS7.9AI score0.03367EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/20 5:29 p.m.31 views

CVE-2018-1000880

libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards release v3.2.0 onwards contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archivereadsupportformatwarc.c, warcread that can result in DoS - quasi-infinite run time and disk usage from ti...

6.5CVSS6.4AI score
SaveExploits0References10
OSV
OSV
added 2018/12/20 5:29 p.m.2 views

DEBIAN-CVE-2018-1000880

libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards release v3.2.0 onwards contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archivereadsupportformatwarc.c, warcread that can result in DoS - quasi-infinite run time and disk usage from ti...

6.5CVSS6.8AI score0.04056EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/12/20 5:29 p.m.26 views

CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

6.5CVSS6.7AI score0.03367EPSS
SaveExploits0References3
Prion
Prion
added 2018/12/20 5:29 p.m.21 views

Design/Logic Flaw

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

6.8CVSS8.4AI score0.04449EPSS
SaveExploits0References15Affected Software8
Prion
Prion
added 2018/12/20 5:29 p.m.25 views

Null pointer dereference

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

4.3CVSS7.1AI score0.03367EPSS
SaveExploits0References8Affected Software3
Prion
Prion
added 2018/12/20 5:29 p.m.20 views

Input validation

libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards release v3.2.0 onwards contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archivereadsupportformatwarc.c, warcread that can result in DoS - quasi-infinite run time and disk usage from ti...

4.3CVSS7.1AI score0.04056EPSS
SaveExploits0References10Affected Software4
Prion
Prion
added 2018/12/20 5:29 p.m.24 views

Double free

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

6.8CVSS8.3AI score0.04575EPSS
SaveExploits0References15Affected Software7
CVE
CVE
added 2018/12/20 5:0 p.m.210 views

CVE-2018-1000880

CVE-2018-1000880 affects libarchive’s WARC parsing code: the function _warc_read() in archive_read_support_format_warc.c has improper input validation, enabling a denial-of-service via specially crafted WARC files. Public sources indicate libarchive versions 3.2.0 through 3.3.3 are vulnerable, wi...

6.5CVSS7AI score0.04056EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
added 2018/12/20 5:0 p.m.26 views

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

8.8CVSS7.1AI score0.04575EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2018/12/20 5:0 p.m.28 views

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be...

8.8CVSS7.1AI score0.04449EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2018/12/20 5:0 p.m.59 views

CVE-2018-1000879

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards release v3.3.0 onwards contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archiveacl.c, archiveaclfromtextl that can result in Crash/DoS. This attack appear to be exploitable via the vict...

6.5CVSS5.5AI score0.03367EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2018/12/20 5:0 p.m.59 views

CVE-2018-1000880

libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards release v3.2.0 onwards contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archivereadsupportformatwarc.c, warcread that can result in DoS - quasi-infinite run time and disk usage from ti...

6.5CVSS5.6AI score0.04056EPSS
SaveExploits0
Rows per page
Query Builder