CVE-2017-7068

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-7068

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-7068

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-7068

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-7068

CVE-2017-7068 affects Apple platforms and is related to the libarchive component. Affected products include iOS < 10.3.3, macOS < 10.12.6, tvOS < 10.2.2, and watchOS

About the security content of tvOS 10.2.2

About the security content of tvOS 10.2.2 This document describes the security content of tvOS 10.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Fedora 26 : libarchive (2017-35e59a5ffb)

fix two minor CVEs by backporting upstream commits rhbz1439705, rhbz1417920 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

libarchive: Crash in Ppmd7_DecodeSymbol

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=6053408735756288 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

Debian DLA-1006-1 : libarchive security update

Multiple denial of services vulnerabilities have been identified in libarchive when manipulating specially crafted archives. CVE-2016-10209 NULL pointer dereference and application crash in the archivewstringappendfrommbs function. CVE-2016-10349 Heap-based buffer over-read and application crash ...

[SECURITY] [DLA 1006-1] libarchive security update

Package : libarchive Version : 3.0.4-3+wheezy6 CVE ID : CVE-2016-10209 CVE-2016-10349 CVE-2016-10350 Debian Bug : 859456 861609 Multiple denial of services vulnerabilities have been identified in libarchive when manipulating specially crafted archives. CVE-2016-10209 NULL pointer dereference and...

DLA-1006-1 libarchive - security update

Bulletin has no description...

libarchive: Heap-buffer-overflow in process_extra

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=6195919814918144 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflo...

libarchive: Heap-buffer-overflow in process_extra

Detailed report: https://oss-fuzz.com/testcase?key=5042257776345088 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000000780 Crash State:...

libarchive Denial of Service Vulnerability (CNVD-2017-10820)

libarchive is a multi-format archive and compression library. A security vulnerability exists in the 'archivewstringappendfrommbs' function in the archivestring.c file in libarchive version 3.2.2. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

MGASA-2017-0132 Updated libarchive packages fix security vulnerabilities

The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. CVE-2016-10209 The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows...

Updated libarchive packages fix security vulnerabilities

The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. CVE-2016-10209 The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows...

libarchive 'archive_read_format_cab_read_header' function denial of service vulnerability

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the archivereadsupportformatcab.c file archivereadformatcabreadheader function in libarchive version 3.2.2. A remote attacker can use this vulnerability to cause a denial of service buffer...

libarchive buffer overflow vulnerability (CNVD-2017-07011)

libarchive is a multi-format archive and compression library. A buffer overflow vulnerability exists in the archivele32dec function of the archiveendian.h file in libarchive version 3.2.2. A remote attacker can exploit this vulnerability to cause a denial of service buffer out-of-bounds read and...

CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...