SUSE: Security Advisory (SUSE-SU-2024:3675-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-225908d17c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in find_elf_data_sec

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4520165977161728 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address:...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the copyfromlzsswindow function in archivereadsupportformatrar.c. An attacker can cause the process to read beyond the allocated heap buffer by crafting a filter block that exceeds the expected...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the bsdtar process when file streams are piped, leading to reading past the end of a file. An attacker can cause unintended program behavior, memory corruption, or application crash by supplying specially crafted...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the buildustarentryname function when processing file name prefixes and suffixes. An attacker can cause adjacent memory corruption, potentially leading to application crashes or unpredictable behavior, by supplyi...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the archivereadformatrarseekdata function. An attacker can cause memory corruption or potentially execute arbitrary code by triggering a double-free condition through crafted input. Remediation Upgrade libarchive to...

PT-2025-24559

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw has been identified in the libarchive library, specifically within the archive read format rar seek data function, involving an integer overflow that can lead to a double-free...

Astra Linux - уязвимость в libarchive

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in archive_le32dec

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5186309230755840 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

RHSA-2025:7510 Red Hat Security Advisory: libarchive security update

Bulletin has no description...

Alibaba Cloud Linux 3 : 0019: libarchive (ALINUX3-SA-2022:0019)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0019 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-1000019: libarchive version commi...

Alibaba Cloud Linux 3 : 0148: libarchive (ALINUX3-SA-2023:0148)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0148 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-36227: In libarchive before 3.6.2, the...

libarchive: heap buffer over-read in header_gnu_longlink

A flaw was found in the libarchive library. A specially-crafted tar file may trigger a head-based buffer over-read condition due to incorrect handling of truncation in the middle of a long GNU linkname. This issue can cause an application crash leading to a denial of service...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

ALSA-2025:7510 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

PT-2025-24554

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw in the libarchive library can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This can cause the...

libarchive:libarchive_fuzzer: Crash in archive_le32dec

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4594365781835776 Project: libarchive Fuzzing Engine: honggfuzz Fuzz Target: libarchivefuzzer Job Type: honggfuzzasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Libarchive Heap Buffer Overflow DoS

The vulnerability of the bsdunzip.c file in the Libarchive library is related to a NULL pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Libarchive Header GNU Longlink DoS

The vulnerability of the headergnulonglink function in the archivereadsupportformattar.c file of the Libarchive library is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...