3196 matches found
Ubuntu 14.04 LTS / 16.04 LTS : libarchive vulnerabilities (USN-3033-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3033-1 advisory. Hanno Bck discovered that libarchive contained multiple security issues when processing certain malformed archive files. A remote attacker...
Ubuntu: Security Advisory (USN-3033-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3033-1 libarchive vulnerabilities
Hanno Böck discovered that libarchive contained multiple security issues when processing certain malformed archive files. A remote attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2015-8916, CVE-2015-8917...
USN-3033-1: libarchive vulnerabilities
Hanno Böck discovered that libarchive contained multiple security issues when processing certain malformed archive files. A remote attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2015-8916, CVE-2015-8917...
Fedora 24 : libarchive (2016-760bd8b6a5)
fix manual pages to mention correctly spelled binary names rhbz1294252, fix CVE-2016-1541, rhbz1334213 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as muc...
Fedora 23 : libarchive (2016-8491ec1ebd)
fix manual pages to mention correctly spelled binary names rhbz1294252, fix CVE-2016-1541, rhbz1334213 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as muc...
Fedora 22 : libarchive (2016-19c34099d3)
fix manual pages to mention correctly spelled binary names rhbz1294252, fix CVE-2016-1541, rhbz1334213 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as muc...
MGASA-2016-0239 Updated libarchive packages fix security vulnerability
An out of bounds read in the rar parser: invalid read in function copyfromlzsswindow when unpacking malformed rar CVE-2015-8934. An exploitable heap overflow vulnerability exists in the 7zip readSubStreamsInfo functionality of libarchive. A specially crafted 7zip file can cause a integer overflow...
Updated libarchive packages fix security vulnerability
An out of bounds read in the rar parser: invalid read in function copyfromlzsswindow when unpacking malformed rar CVE-2015-8934. An exploitable heap overflow vulnerability exists in the 7zip readSubStreamsInfo functionality of libarchive. A specially crafted 7zip file can cause a integer overflow...
libarchive: arbitrary code execution
A vulnerability was found in libarchive. A specially crafted zip file can provide an incorrect compressed size, which may allow an attacker to place arbitrary code on the heap and execute it in the context of the application...
PT-2016-4060 · Libarchive +2 · Libarchive +2
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service crash via crafted cab files. This is related to "overlapping memcpy" in the archive string append function in archive string.c...
CVE-2016-5844
Undefined behavior signed integer overflow was discovered in libarchive, in the ISO parser. A crafted file could potentially cause denial of service...
Libarchive Integer Overflow Vulnerability
libarchive is a multi-format archive and compression library. An integer overflow vulnerability exists in libarchive 3.2.0 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted files...
openSUSE Security Update : libarchive (openSUSE-2016-770)
libarchive was updated to fix one security issue. This security issue was fixed : - CVE-2016-4809: Memory allocation error with gigantic symbolic links in cpio archives bsc984990. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Open-source compression library Libarchive exposed high-risk vulnerabilities, affect the Debian Linux, FreeBSD, etc. a large number of products-vulnerability warning-the black bar safety net
! The recent Libarchive has been exposed security vulnerabilities--Libarchive is an open source compression Library, for a variety of different file archive formats. Libarchive application range is very wide, therefore, so a large number of natural also will be affected, such as Debian Linux,...
Heap-buffer-overflow in archive_le16dec
Project: https://github.com/libarchive/libarchive.git...
Heap-buffer-overflow in archive_le16dec
Project: https://github.com/libarchive/libarchive.git...
UBUNTU-CVE-2016-5844
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file...
FreeBSD : libarchive -- multiple vulnerabilities (4a0d9b53-395d-11e6-b3c8-14dae9d210b8)
Hanno Bock and Cisco Talos report : - Out of bounds heap read in RAR parser - Signed integer overflow in ISO parser - TALOS-2016-0152 CVE-2016-4300: 7-Zip readSubStreamsInfo Integer Overflow - TALOS-2016-0153 CVE-2016-4301: mtree parsedevice Stack Based Buffer Overflow - TALOS-2016-0154...
