libarchive/libarchive_fuzzer: Heap-buffer-overflow in archive_le32dec

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=6217869126795264 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

CVE-2017-13812

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted archive file...

CVE-2017-13812

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted archive file...

CVE-2017-13813

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...

CVE-2017-13816

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...

CVE-2017-13816

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...

CVE-2017-13813

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...

Buffer overflow

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...

Buffer overflow

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted archive file...

CVE-2017-13816

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...

CVE-2017-13816

CVE-2017-13816 describes a vulnerability in libarchive affecting macOS prior to 10.13.1, allowing a remote attacker to cause arbitrary code execution or a denial of service by processing a specially crafted archive. The issue is tied to the libarchive component and is publicly documented in the A...

CVE-2017-13812

CVE-2017-13812 affects macOS before 10.13.1 via the libarchive component. A crafted archive can trigger memory corruption, enabling remote code execution or causing a denial of service. Apple’s security notes indicate the issue relates to libarchive in macOS High Sierra 10.13.x and is addressed i...

CVE-2017-13813

CVE-2017-13813 affects macOS?before 10.13.1 and involves libarchive. A crafted archive can cause remote code execution or a denial of service (buffer overflow) on affected Apple devices. Apple released updates (macOS High Sierra 10.13.1 and related security updates) to fix the issue; systems shou...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-001 and 2017-004)

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - 802.1X - apache - AppleScript - ATS - Audio - CFString - CoreText - curl - Dictionary Widget - file - Font...

Apple macOS High Sierra libarchiv code execution vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. libarchive is a multi-format archive and compression component. A security vulnerability exists in the libarchive component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can...

Apple macOS High Sierra libarchive buffer overflow vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. libarchive is a multi-format archive and compression component. A buffer overflow vulnerability exists in the libarchive component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacke...

Apple macOS High Sierra libarchive buffer overflow vulnerability (CNVD-2017-34199)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. libarchive is a multi-format archive and compression component. A buffer overflow vulnerability exists in the libarchive component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacke...

Libarchive zip zip_read_mac_metadata Code Execution Vulnerability(CVE-2016-1541)

SUMMARY An exploitable heap overflow vulnerability exists in the zip archive decompression functionality of libarchive. A specially crafted zip file can cause memory corruption leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS libarchi...

BusyBox integer overflow vulnerability (CNVD-2017-35514)

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the 'getnextblock' function in the archival/libarchive/decompressbunzip2.c file in BusyBox version 1.27.2. An attacke...