3264 matches found
RHEL 9 : libarchive (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libarchive: Race condition in multi-threaded use of archivewritediskheader on posix based systems CVE-2023-30571 No...
RHEL 6 : libarchive (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: directory traversal in bsdcpio CVE-2015-2304 - libarchive: Infinite recursion in...
[SECURITY] Fedora 40 Update: libarchive-3.7.2-4.fc40
Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
Fedora 40 : libarchive (2024-cbb72aad83)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-cbb72aad83 advisory. Automatic update for libarchive-3.7.2-4.fc40. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2024-26256
A flaw was found in the libarchive library. A heap-based buffer overflow in the executefiltere8 function in the libarchive/archivereadsupportformatrar.c file can be triggered when a specially crafted RAR archive is processed, causing a crash to the application linked to the library, and resulting...
Advisory ROSA-SA-2024-2421
Software: libarchive 3.3.3 OS: ROSA Virtualization 2.1 packageevrstring: libarchive-3.3.3 CVE-ID: CVE-2019-11463 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A memory leak in archivereadformatzipcleanup in archivereadsupportformatzip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial...
RHEL 8 : libarchive (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: Improper input validation in WARC parser resulting in a denial of service CVE-2018-1000880 -...
RHEL 7 : libarchive (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: Out of bounds read in lhareadfileheader1 function CVE-2017-5601 - libarchive: NULL pointer...
RHEL 6 : libarchive (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libarchive: Off-by-one error in the readheader function CVE-2017-14502 - libarchive: NULL pointer...
Mageia: Security Advisory (MGASA-2024-0154)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2024-0154 Updated libarchive packages fix security vulnerability
Remote Code Execution Vulnerability. CVE-2024-26256...
Updated libarchive packages fix security vulnerability
Remote Code Execution Vulnerability. CVE-2024-26256...
PT-2024-7942 · Unknown +5 · Libarchive +5
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.7.5 Description: The issue is related to out-of-bounds access in the execute filter audio function within the archive read support format rar.c component of the libarchive library. This can be exploited via a...
PT-2024-7937 · Unknown +6 · Libarchive +6
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.7.5 Description: The issue is related to the execute filter delta function in the archive read support format rar.c component of the libarchive library, which allows out-of-bounds access to data when reading a...
PT-2025-24555
Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw has been identified in the libarchive library involving an integer overflow. This issue can be triggered when processing a Web Archive WARC file that claims to have more than INT64...
Slackware: Security Advisory (SSA:2024-116-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] libarchive
New libarchive packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libarchive-3.7.3-i586-2slack15.0.txz: Rebuilt. Patched an out-of-bound error in the rar e8 filter that could allow for the...
Slackware Linux 15.0 / current libarchive Vulnerability (SSA:2024-116-01)
The version of libarchive installed on the remote host is prior to 3.7.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-116-01 advisory. - libarchive Remote Code Execution Vulnerability CVE-2024-26256 Note that Nessus has not tested for this issue but has instead...
The vulnerability of the libarchive library for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the libarchive library for Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
