Apple macOS High Sierra libarchive buffer overflow vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. libarchive is a multi-format archive and compression component. A buffer overflow vulnerability exists in the libarchive component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacke...

Apple macOS High Sierra libarchiv code execution vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. libarchive is a multi-format archive and compression component. A security vulnerability exists in the libarchive component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can...

Libarchive zip zip_read_mac_metadata Code Execution Vulnerability(CVE-2016-1541)

SUMMARY An exploitable heap overflow vulnerability exists in the zip archive decompression functionality of libarchive. A specially crafted zip file can cause memory corruption leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS libarchi...

BusyBox integer overflow vulnerability (CNVD-2017-35513)

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the archival/libarchive/decompressunlzma.c file in BusyBox version 1.27.2. An attacker could exploit this vulnerabili...

BusyBox integer overflow vulnerability (CNVD-2017-35514)

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the 'getnextblock' function in the archival/libarchive/decompressbunzip2.c file in BusyBox version 1.27.2. An attacke...

Integer overflow

archival/libarchive/decompressunlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation...

Integer overflow

The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

ALPINE-CVE-2017-15874

archival/libarchive/decompressunlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation...

Libarchive 7zip read_SubStreamsInfo Code Execution Vulnerability(CVE-2016-4300)

SUMMARY An exploitable \heap overflow vulnerability exists in the 7zip readSubStreamsInfo functionality of libarchive. A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution. An attacker can send a malformed file to trigger this...

Libarchive mtree parse_device Code Execution Vulnerability(CVE-2016-4301)

SUMMARY An exploitable stack based buffer overflow vulnerability exists in the mtree parsedevice functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption/code execution. An attacker can send a malformed file to trigger this...

libarchive: Multiple vulnerabilities

Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description Multiple vulnerabilities have been discovered in libarchive. Please review the referenced CVE identifiers fo...

GLSA-201710-19 : libarchive: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-19 libarchive: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libarchive. Please review the referenced CVE identifiers for details. Impact : A remote attacker, via a specially crafted file, could...

CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

CVE-2017-14503

libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

libarchive Denial of Service Vulnerability (CNVD-2017-27308)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the archivereadsupportformatlha.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and crash...

Libarchive Out-of-Bounds Read Vulnerability

libarchive is a multi-format archive and compression library. An out-of-bounds read vulnerability exists in the archivereadsupportformatiso9660.c file in libarchive version 3.3.2. A remote attacker could exploit this vulnerability to cause a denial of service...

libarchive Denial of Service Vulnerability (CNVD-2017-27309)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the readheader of the archivereadsupportformatrar.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service 'archivereadformatrarreadheader'...

CVE-2017-14503

libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...

Design/Logic Flaw

libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...