3204 matches found
Security Bulletin: Vulnerabilities in libarchive affect PowerKVM
Summary PowerKVM is affected by numerous vulnerabilities in libarchive. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8916 DESCRIPTION: libarchive is vulnerable to a denial of service, caused by a NULL pointer dereference error in RAR parser. By persuading a...
Security Bulletin: Multiple libarchive vulnerabilities affect Watson Explorer
Summary Multiple libarchive vulnerabilities affect Watson Explorer. Vulnerability Details CVEID: CVE-2015-8915 DESCRIPTION: libarchive is vulnerable to a denial of service, caused by an invalid memory read in CPIO parser. By reading a specially-crafted CPIO file, a remote attacker could exploit...
Denial Of Service (DoS) Through Integer Overflow
libarchive.so is vulnerable to denial of service DoS through integer overflow. The vulnerability exists in archivereadformatiso9660readheader of libarchive/archivereadsupportformatiso9660.c where the value of vd-location could overflow, causing a denial of service DoS when parsing an ISO...
Denial Of Service (DoS) Through Heap Buffer Overflow
libarchive.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in atol10 and atol08 of libarchive/archivereadsupportformatxar.c where a heap-based buffer overflow can occur when processing a malicious xar archive...
Debian: Security Advisory (DLA-1092-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-1006-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the libarchive library, which exists due to a resource management error, allows a hacker to cause a service failure.
The vulnerability of the libarchive library exists due to a resource management flaw—the absence of limits on the number of archives that can be decompressed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by using a specially created gz...
libarchive/libarchive_fuzzer: Heap-buffer-overflow in archive_le32dec
Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=6217869126795264 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...
CVE-2017-13816
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...
CVE-2017-13813
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...
CVE-2017-13812
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted archive file...
CVE-2017-13816
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...
CVE-2017-13812
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted archive file...
CVE-2017-13813
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...
Buffer overflow
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...
Buffer overflow
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...
Memory corruption
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted archive file...
CVE-2017-13812
CVE-2017-13812 affects macOS before 10.13.1 via the libarchive component. A crafted archive can trigger memory corruption, enabling remote code execution or causing a denial of service. Apple’s security notes indicate the issue relates to libarchive in macOS High Sierra 10.13.x and is addressed i...
CVE-2017-13816
CVE-2017-13816 describes a vulnerability in libarchive affecting macOS prior to 10.13.1, allowing a remote attacker to cause arbitrary code execution or a denial of service by processing a specially crafted archive. The issue is tied to the libarchive component and is publicly documented in the A...
CVE-2017-13813
CVE-2017-13813 affects macOS?before 10.13.1 and involves libarchive. A crafted archive can cause remote code execution or a denial of service (buffer overflow) on affected Apple devices. Apple released updates (macOS High Sierra 10.13.1 and related security updates) to fix the issue; systems shou...