CVE-2019-19221

In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive...

Amazon Linux 2 : libarchive (ALAS-2020-1391)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1391 advisory. archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain...

Important Photon OS Security Update - PHSA-2020-0055

Updates of 'libarchive', 'sqlite', 'libxml2' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0272

An update of 'libxml2', 'libarchive', 'salt' packages of Photon OS has been released...

Photon OS 3.0: Libarchive PHSA-2020-3.0-0055

An update of the libarchive package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0055. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133504;...

Important: libarchive

Issue Overview: archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED situation, related to Ppmd7DecodeSymbol. CVE-2019-18408 Affected Packages: libarchive Note: This advisory is applicable to Amazon Linux 2 AL2 Co...

Important Photon OS Security Update - PHSA-2020-3.0-0055

Updates of 'libarchive', 'libxml2', 'sqlite' packages of Photon OS have been released...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in read_bits_16

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5135343248736256 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

PT-2020-5166

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.4.2 Description The issue is related to errors in input data validation in the archive read support format rar5.c file of the libarchive library. This can lead to a denial of service when handling RAR5 files with...

CentOS 7 : libarchive (RHSA-2020:0203)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0203 advisory. - archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED situation, related to...

Oracle Linux 8 : libarchive (ELSA-2020-0271)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0271 advisory. 3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

RHEL 8 : libarchive (RHSA-2020:0271)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0271 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM...

libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry

A use-after-free vulnerability was discovered in libarchive in the way it processes RAR archives when there is an error in one of the archive's entries. An application that accepts untrusted RAR archives may be vulnerable to this flaw, which could allow a remote attacker to cause a denial of...

Important: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

libarchive security update

3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free...

CentOS: Security Advisory for bsdcpio (CESA-2020:0203)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 8 : libarchive (RHSA-2020:0246)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0246 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM...

Important: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry

A use-after-free vulnerability was discovered in libarchive in the way it processes RAR archives when there is an error in one of the archive's entries. An application that accepts untrusted RAR archives may be vulnerable to this flaw, which could allow a remote attacker to cause a denial of...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2019-2202)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...