Lucene search
+L

3276 matches found

OSV
OSV
added 2020/06/10 10:57 p.m.12 views

MGASA-2020-0253 Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: archivereadsupportformatlha.c in libarchive before 3.4.1 does not ensure valid sizes for UTF-16 input, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted LHA archive...

7AI score
SaveExploits0References6
Mageia
Mageia
added 2020/06/10 10:57 p.m.40 views

Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: archivereadsupportformatlha.c in libarchive before 3.4.1 does not ensure valid sizes for UTF-16 input, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted LHA archive...

5AI score
SaveExploits0References5
OpenVAS
OpenVAS
added 2020/06/08 12:00 a.m.36 views

Fedora: Security Advisory for libarchive (FEDORA-2020-d8278fe24d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/06/08 12:00 a.m.42 views

Fedora 31 : libarchive (2020-d8278fe24d)

The remote Fedora 31 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-d8278fe24d advisory. Rebase to version 3.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

8.8CVSS7.9AI score0.02251EPSS
SaveExploits0References2
Fedora
Fedora
added 2020/06/07 7:47 p.m.40 views

[SECURITY] Fedora 31 Update: libarchive-3.4.3-1.fc31

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

8.8CVSS2.1AI score0.02251EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/06/04 12:00 a.m.39 views

Fedora 32 : libarchive (2020-94211d0a7d)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-94211d0a7d advisory. Rebase to version 3.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

8.8CVSS7.9AI score0.02251EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/06/03 12:00 a.m.39 views

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-1607)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.00661EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/06/02 12:00 a.m.27 views

EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2020-1607)

According to the version of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. Fo...

5.5CVSS6.7AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/05/29 12:00 a.m.19 views

Fedora: Security Advisory for libarchive (FEDORA-2020-94211d0a7d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.7AI score0.02251EPSS
SaveExploits0References2
Fedora
Fedora
added 2020/05/26 3:15 a.m.39 views

[SECURITY] Fedora 32 Update: libarchive-3.4.3-1.fc32

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

8.8CVSS2.1AI score0.02251EPSS
SaveExploits0
Photon
Photon
added 2020/05/14 12:00 a.m.49 views

Critical Photon OS Security Update - PHSA-2020-0294

Updates of 'salt3', 'salt', 'ruby' packages of Photon OS have been released...

9.8CVSS7AI score0.96614EPSS
SaveExploits24
Tenable Nessus
Tenable Nessus
added 2020/05/01 12:00 a.m.68 views

EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2020-1569)

According to the version of the libarchive package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect...

5.5CVSS6.6AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/04/30 12:00 a.m.37 views

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-1569)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.00661EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:00 a.m.8 views

The vulnerability of the archive_acl_from_text_lins function in the libarchive library, which allows a hacker to trigger a service failure.

The vulnerability of the archiveaclfromtextlins function in the libarchive library is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures through a specially created archive...

7.1CVSS6.4AI score0.03367EPSS
SaveExploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:00 a.m.8 views

The vulnerability of the libarchive library, related to reading beyond the buffer boundaries of memory, allows a hacker to cause a service failure.

The vulnerability of the libarchive library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created archive...

7.1CVSS6.5AI score0.03407EPSS
SaveExploits1References16Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:00 a.m.8 views

The vulnerability of the libarchive library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the libarchive library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through the use of a specially created ISO966 file...

7.1CVSS6.5AI score0.03196EPSS
SaveExploits0References16Affected Software8
Tenable Nessus
Tenable Nessus
added 2020/04/21 12:00 a.m.28 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : libarchive Vulnerability (NS-SA-2020-0013)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libarchive packages installed that are affected by a vulnerability: - A use-after-free vulnerability was discovered in libarchive in the way it processes RAR archives when there is an error in one of the archive's entries. ...

7.5CVSS6.4AI score0.0404EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/04/16 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-1488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.05079EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:00 a.m.44 views

EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-1488)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards version v2.8.0 onwards contains a CWE-835: Loop wit...

7.5CVSS7AI score0.05079EPSS
SaveExploits5References19
OpenVAS
OpenVAS
added 2020/04/16 12:00 a.m.34 views

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-1397)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.0373EPSS
SaveExploits1References2
Rows per page
Query Builder