libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service

libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards release v3.0.2 onwards contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archivereadsupportformat7zip.c, headerbytes that can result in a crash denial of service. This attack appears to be...

libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service

libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards version v2.8.0 onwards contains a CWE-835: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in ISO9660 parser, archivereadsupportformatiso9660.c, readCE/parserockridge that can result in DoS by infinite...

libarchive: Double free in RAR decoder resulting in a denial of service

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archivereadsupportformatrar.c, parsecodes, reallocrar-lzss.window, newsize with newsize = 0 that can result in Crash/DoS. Thi...

EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2019-1681)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards release v3.0.2 onwards contains a CWE-125: Out-of-bounds Read...

EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2019-1725)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenEMR version 5.0.0 contains a Cross Site Scripting XSS vulnerability in open-flash-chart.swf and posteddata.php that can result in . This...

EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2019-1714)

According to the versions of the libarchive package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards version v2.8.0 onwards contains a CWE-83...

libarchive/libarchive_fuzzer: Crash in copy_string

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5728233707798528 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

[ASA-201906-21] libarchive: multiple issues

Arch Linux Security Advisory ASA-201906-21 ========================================== Severity: High Date : 2019-06-25 CVE-ID : CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000880 CVE-2019-1000019 CVE-2019-1000020 Package : libarchive Type : multiple issues Remote : No Link :...

Photon OS 3.0: Libarchive PHSA-2019-3.0-0015

An update of the libarchive package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0015. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126114;...

libarchive/libarchive_fuzzer: Heap-buffer-overflow in run_arm_filter

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5666609181491200 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflo...

libarchive/libarchive_fuzzer: Crash in crc32

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5668631809097728 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

Critical Photon OS Security Update - PHSA-2019-0161

Updates of 'linux-aws', 'linux', 'kubernetes', 'polkit', 'wget', 'linux-secure', 'elfutils', 'python2', 'mesos', 'glib', 'python3', 'libsoup', 'linux-esx', 'libvirt', 'tar', 'curl', 'libtiff', 'libarchive', 'zookeeper' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0161

An update of 'libarchive', 'elfutils', 'wget', 'go', 'curl', 'linux-secure', 'python2', 'kubernetes', 'linux-esx', 'linux-aws', 'libtiff', 'mesos', 'glib', 'libsoup', 'libvirt', 'zookeeper', 'tar', 'linux', 'polkit', 'python3' packages of Photon OS has been released...

libarchive/libarchive_fuzzer: Crash in Ppmd7_DecodeSymbol

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5678650441072640 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

Critical Photon OS Security Update - PHSA-2019-0015

Updates of 'keepalived', 'elfutils', 'libarchive', 'kubernetes', 'linux-esx', 'mercurial', 'linux', 'mysql', 'linux- secure', 'linux-aws' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-3.0-0015

Updates of 'linux-aws', 'mysql', 'mercurial', 'linux', 'libarchive', 'kubernetes', 'linux-secure', 'linux-esx', 'keepalived', 'elfutils' packages of Photon OS have been released...

Photon OS 1.0: Libarchive PHSA-2019-1.0-0227

An update of the libarchive package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0227. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS Virtualization for ARM 64 3.0.1.0 : libarchive (EulerOS-SA-2019-1390)

According to the versions of the libarchive package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards release v3.1.0 onwards contains a CWE-41...

EulerOS Virtualization 3.0.1.0 : libarchive (EulerOS-SA-2019-1470)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libarchive. A specially crafted MTREE file could cause a small out-of-bounds read, potentially...

libarchive/libarchive_fuzzer: Heap-use-after-free in Ppmd7_DecodeSymbol

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5754300750364672 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free...