Photon OS 1.0: Binutils / Libarchive / Ntp PHSA-2017-0010 (deprecated)

An update of binutils,ntp,libarchive packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0010. The text itself is copyright C VMwar...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-3736-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3736-1 advisory. It was discovered that libarchive incorrectly handled certain archive files. A remote attacker could possibly use this issue to...

USN-3736-1: libarchive vulnerabilities

It was discovered that libarchive incorrectly handled certain archive files. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-10209, CVE-2016-10349, CVE-2016-10350 Agostino Sarubbo discovered tha...

USN-3736-1 libarchive vulnerabilities

It was discovered that libarchive incorrectly handled certain archive files. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-10209, CVE-2016-10349, CVE-2016-10350 Agostino Sarubbo discovered tha...

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service DoS attacks. A malicious user can pass a cpio file to the application to cause an invalid read that can crash the application...

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service DoS attacks. A malicious user can pass a 7z file to the readCodersInfo function in archivereadsupportformat7zip.c to cause a NULL pointer dereference that can crash the application...

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tar file to the compressbidderinit function in archivereadsupportfiltercompress.c, causing an invalid left shift that can crash the application...

CVE-2015-9261

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

Debian: Security Advisory (DLA-1440-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1440-1 libarchive-zip-perl - security update

Bulletin has no description...

USN-3703-2: Archive Zip vulnerability

USN-3703-1 fixed a vulnerability in Archive Zip module. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive...

USN-3703-1 libarchive-zip-perl vulnerability

It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information...

USN-3703-1: Archive Zip

It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information...

Security Bulletin: Vulnerabilities in libarchive affect PowerKVM

Summary PowerKVM is affected by numerous vulnerabilities in libarchive. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8916 DESCRIPTION: libarchive is vulnerable to a denial of service, caused by a NULL pointer dereference error in RAR parser. By persuading a...

Security Bulletin: Multiple libarchive vulnerabilities affect Watson Explorer

Summary Multiple libarchive vulnerabilities affect Watson Explorer. Vulnerability Details CVEID: CVE-2015-8915 DESCRIPTION: libarchive is vulnerable to a denial of service, caused by an invalid memory read in CPIO parser. By reading a specially-crafted CPIO file, a remote attacker could exploit...

Denial Of Service (DoS) Through Integer Overflow

libarchive.so is vulnerable to denial of service DoS through integer overflow. The vulnerability exists in archivereadformatiso9660readheader of libarchive/archivereadsupportformatiso9660.c where the value of vd-location could overflow, causing a denial of service DoS when parsing an ISO...

Denial Of Service (DoS) Through Heap Buffer Overflow

libarchive.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in atol10 and atol08 of libarchive/archivereadsupportformatxar.c where a heap-based buffer overflow can occur when processing a malicious xar archive...

Debian: Security Advisory (DLA-1092-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1006-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the libarchive library, which exists due to a resource management error, allows a hacker to cause a service failure.

The vulnerability of the libarchive library exists due to a resource management flaw—the absence of limits on the number of archives that can be decompressed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by using a specially created gz...