3782 matches found
PT-2026-112130
Name of the Vulnerable Software and Affected Versions Windows libarchive affected versions not specified Description A relative path traversal issue exists in Windows libarchive. This flaw allows an unauthorized attacker to perform tampering over a network. Path traversal is a technique where an...
CVE-2026-69639: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...
CVE-2026-69973: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...
EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2026-4059)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf point...
EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2026-4335)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...
EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2026-4244)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...
EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2026-4150)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf point...
CVE-2026-107335
Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...
USN-8902-1: libarchive vulnerability
It was discovered that libarchive had a signed integer overflow in its ZIP writer when handling encrypted entries with sizes near the maximum value. An attacker could possibly use this issue to cause libarchive to crash or execute arbitrary code...
USN-8902-1 libarchive vulnerability
It was discovered that libarchive had a signed integer overflow in its ZIP writer when handling encrypted entries with sizes near the maximum value. An attacker could possibly use this issue to cause libarchive to crash or execute arbitrary code...
EulerOS 2.0 SP15 : libarchive (EulerOS-SA-2026-3918)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...
EulerOS 2.0 SP15 : libarchive (EulerOS-SA-2026-3984)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...
K000163579: libarchive vulnerability CVE-2026-14164
Security Advisory Description A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry...
Astra Linux – Vulnerability in libarchive
An improper link resolution flaw can occur during the extraction of an archive, resulting in changes to the mode, times, access control lists, and flags of a file within the archive. An attacker may provide a malicious archive to a victim user, triggering this flaw when the victim attempts to...
Astra Linux – Vulnerability in libarchive
“executefilteraudio” in “archivereadsupportformatrar.c” in “libarchive” before version 3.7.5 allows out-of-bounds access via a crafted archive file, as “src” can move beyond “dst”...
Astra Linux – Vulnerability in libarchive
In libarchive before version 3.6.2, the software does not check for an error after calling the calloc function. This function may return a NULL pointer if it fails, resulting in a NULL pointer being dereferenced. NOTE: The developer mentions this as a CWE-476 issue, but third parties dispute its...
Astra Linux – Vulnerability in libarchive
In libarchive versions 3.4.1 through 3.5.1, there is a use-after-free in the copystring function called from douncompressblock and processblock...
Astra Linux – Vulnerability in libarchive
Libarchive Remote Code Execution Vulnerability...
[SECURITY] Fedora 45 Update: libarchive-3.8.9-2.fc45
Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
CentOS Linux 7 [TuxCare] Security Update: bsdcpio / bsdtar / libarchive / libarchive-devel (CENTOS7:CLSA-2025:1753377742)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1753377742 advisory. - listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or...