3782 matches found
PT-2021-6391
Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description The issue is related to an improper link resolution flaw that occurs when extracting an archive, potentially allowing an attacker to change modes, times, access control lists, and flags of...
SUSE: Security Advisory (SUSE-SU-2021:3722-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2021:3722-1)
The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3722-1 advisory. - CVE-2019-19221: Fixed out-of-bounds read caused by incorrect mbrtowc or mbtowc call bsc1157569 - backporting symlink security fix...
SUSE-SU-2021:3722-1 Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2019-19221: Fixed out-of-bounds read caused by incorrect mbrtowc or mbtowc call bsc1157569 - backporting symlink security fixes from 3.5.2: - extracting with ACLs modifies ACLs of target bsc1192425 - modifies file flags of target...
OESA-2021-1398 libarchive security update
libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use...
MGASA-2021-0430 Updated libarchive packages fix security vulnerability
Fix handling of symbolic link ACLs on Linux. Never follow symlinks when setting file flags on Linux. Do not follow symlinks when processing the fixup list...
Updated libarchive packages fix security vulnerability
Fix handling of symbolic link ACLs on Linux. Never follow symlinks when setting file flags on Linux. Do not follow symlinks when processing the fixup list...
libarchive:libarchive_fuzzer: Heap-use-after-free in copy_string
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4964186501808128 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...
libarchive:libarchive_fuzzer: Crash in copy_string
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4968596728578048 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
libarchive:libarchive_fuzzer: Crash in liblzma.so.5
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6716998885703680 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in next_cache_entry
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6494798048002048 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in decode_number
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4614148940496896 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libarchive:libarchive_fuzzer: Heap-use-after-free in rar5_read_data
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6510765528449024 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...
libarchive:libarchive_fuzzer: Use-after-poison in read_children
Detailed Report: https://oss-fuzz.com/testcase?key=5833055716638720 Project: libarchive Fuzzing Engine: honggfuzz Fuzz Target: libarchivefuzzer Job Type: honggfuzzasanlibarchive Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe1978000 Crash State: readchildren...
SUSE-RU-2021:2757-1 Recommended update for libarchive
This update for libarchive fixes the following issues: libarchive was updated to version 3.3.3 Avoid super-linear slowdown on malformed mtree files Many fixes for building with Visual Studio NOOVERWRITE doesn't change existing directory attributes New support for Zstandard read and write filters...
OESA-2021-1305 file-roller security update
File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive. Security Fixes: fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during...
libarchive Heap Buffer Overflow DoS
The vulnerability of the douncompressblock and processblock functions in the libarchive library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CVE-2021-36976
A use-after-free flaw was found in libarchive in the copystring function...
