CVE-2016-4300

A vulnerability was found in libarchive's handling of 7zip data. A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution...

CVE-2016-4301

An exploitable stack based buffer overflow vulnerability exists in the mtree parsedevice functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption and potential code execution in the context of the application...

libarchive ISO Parser Infinite Loop Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in the ISO parser of libarchive. An attacker could exploit this vulnerability to cause an infinite loop...

libarchive TAR Parser Integer Overflow Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform undefined operations, resulting in an integer overflow...

libarchive mtree parser integer overflow vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's mtree parser. An attacker can exploit this vulnerability to perform undefined operations, resulting in an integer overflow...

libarchive TAR Parser Unauthorized Operation Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform an undefined operation, resulting in an invalid left shift...

Slackware 14.1 / current : libarchive (SSA:2016-172-01)

New libarchive packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-172-01. The text itself is copyright C...

libarchive RAR parser heap out-of-bounds read vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

[slackware-security] libarchive

New libarchive packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libarchive-3.2.1-i486-1slack14.1.txz: Upgraded. This release fixes several critical bugs, including some with security implication...

libarchive RAR Parser Null Pointer Access Vulnerability

libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause null pointer access...

libarchive CAB Parser Null Pointer Access Vulnerability

libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's CAB parser. An attacker could exploit this vulnerability to cause a null pointer access...

Unspecified vulnerability in libarchive CAB parser

libarchive is a multi-format archive and compression library. An unspecified vulnerability exists in libarchive's CAB parser. An attacker could exploit this vulnerability to cause a memory overwrite...

libarchive CPIO Parser Memory Read Vulnerability

libarchive is a multi-format archive and compression library. A memory read vulnerability exists in libarchive's CPIO parser. An attacker can exploit this vulnerability to cause an invalid memory read...

Libarchive 7zip read_SubStreamsInfo Code Execution Vulnerability

SUMMARY An exploitable \heap overflow vulnerability exists in the 7zip readSubStreamsInfo functionality of libarchive. A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution. An attacker can send a malformed file to trigger this...

Libarchive mtree parse_device Code Execution Vulnerability

SUMMARY An exploitable stack based buffer overflow vulnerability exists in the mtree parsedevice functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption/code execution. An attacker can send a malformed file to trigger this...

Libarchive Rar RestartModel Code Execution Vulnerability

SUMMARY An exploitable heap overflow vulnerability exists in the Rar decompression functionality of libarchive. A specially crafted Rar file can cause a heap corruption eventually leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS...

CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

UBUNTU-CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2016:1588-1)

This update for libarchive fixes the following issue : - Fix a heap-based buffer overflow CVE-2016-1541, bsc979005 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it ...

CVE-2016-4809

A vulnerability was found in libarchive. A specially crafted cpio archive containing a symbolic link to a ridiculously large target path can cause memory allocation to fail, resulting in any attempt to view or extract the archive crashing...