3783 matches found
PT-2021-3660 · Unknown +7 · Libarchive +7
Name of the Vulnerable Software and Affected Versions: libarchive versions 3.4.1 through 3.5.1 Description: The issue is related to a use-after-free in the copy string function, which is called from do uncompress block and process block functions. This can allow a remote attacker to execute...
NewStart CGSL MAIN 6.02 : libarchive Vulnerability (NS-SA-2021-0079)
The remote NewStart CGSL host, running version MAIN 6.02, has libarchive packages installed that are affected by a vulnerability: - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in read_children
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5637075267354624 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libarchive:libarchive_fuzzer: Heap-use-after-free in copy_string
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6558218656546816 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in next_cache_entry
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6378111585353728 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in decode_number
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5779303243579392 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libarchive:libarchive_fuzzer: Heap-use-after-free in rar5_read_data
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4820132432052224 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...
CentOS 8 : libarchive (CESA-2020:0271)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0271 advisory. - libarchive: use-after-free in archivereadformatrarreaddata when there is an error in the decompression of an archive entry CVE-2019-18408 Note that Nessus has...
CentOS 8 : libarchive (CESA-2020:4443)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4443 advisory. - libarchive: out-of-bounds read in archivewstringappendfrommbs in archivestring.c CVE-2019-19221 Note that Nessus has not tested for this issue but has instead...
CentOS 8 : libarchive (CESA-2019:3698)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3698 advisory. - libarchive: Out-of-bounds read in lhareaddatanone CVE-2017-14503 - libarchive: Double free in RAR decoder resulting in a denial of service...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in read_bits_16
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6544026580942848 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
libarchive RAR5 DoS
The vulnerability related to the initialization of the archivereadsupportformatrar5.c file in the libarchive library is linked to input validation errors. Exploiting this vulnerability allows an attacker to cause service interruptions using RAR5 format files...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in read_children
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5181879846305792 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
NewStart CGSL CORE 5.05 / MAIN 5.05 : libarchive Vulnerability (NS-SA-2020-0109)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libarchive packages installed that are affected by a vulnerability: - archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED situation, relat...
Oracle Linux 8 : libarchive (ELSA-2020-4443)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4443 advisory. 3.3.2-9 - Fix out-of-bounds read CVE-2019-19221 1803967 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
libarchive security update
3.3.2-9 - Fix out-of-bounds read CVE-2019-19221 1803967...
Photon OS 2.0: Libarchive PHSA-2020-2.0-0294
An update of the libarchive package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0294. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Libarchive PHSA-2020-3.0-0160
An update of the libarchive package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid142658;...
