Debian Security Advisory DSA 3677-1 (libarchive - security update)

Several vulnerabilities were discovered in libarchive, a multi-format archive and compression library, which may lead to denial of service memory consumption and application crash, bypass of sandboxing restrictions and overwrite arbitrary files with arbitrary data from an archive, or the executio...

DSA-3677-1 libarchive - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3677-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

Libarchive Information Disclosure Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive, which can be exploited by an attacker to overwrite arbitrary files...

DEBIAN-CVE-2016-7166

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...

CVE-2016-7166

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...

CVE-2016-7166

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...

CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

ALPINE-CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

ALPINE-CVE-2016-5844

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file...

CVE-2016-5844

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file...

DEBIAN-CVE-2016-5844

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file...

CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

DEBIAN-CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

DEBIAN-CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

ALPINE-CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...