BusyBox integer overflow vulnerability (CNVD-2017-35513)

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the archival/libarchive/decompressunlzma.c file in BusyBox version 1.27.2. An attacker could exploit this vulnerabili...

Integer overflow

archival/libarchive/decompressunlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation...

Integer overflow

The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

ALPINE-CVE-2017-15874

archival/libarchive/decompressunlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation...

Libarchive mtree parse_device Code Execution Vulnerability(CVE-2016-4301)

SUMMARY An exploitable stack based buffer overflow vulnerability exists in the mtree parsedevice functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption/code execution. An attacker can send a malformed file to trigger this...

Libarchive 7zip read_SubStreamsInfo Code Execution Vulnerability(CVE-2016-4300)

SUMMARY An exploitable \heap overflow vulnerability exists in the 7zip readSubStreamsInfo functionality of libarchive. A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution. An attacker can send a malformed file to trigger this...

libarchive: Multiple vulnerabilities

Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description Multiple vulnerabilities have been discovered in libarchive. Please review the referenced CVE identifiers fo...

GLSA-201710-19 : libarchive: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-19 libarchive: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libarchive. Please review the referenced CVE identifiers for details. Impact : A remote attacker, via a specially crafted file, could...

CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

CVE-2017-14503

libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

libarchive Denial of Service Vulnerability (CNVD-2017-27308)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the archivereadsupportformatlha.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and crash...

libarchive Denial of Service Vulnerability (CNVD-2017-27309)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the readheader of the archivereadsupportformatrar.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service 'archivereadformatrarreadheader'...

Libarchive Out-of-Bounds Read Vulnerability

libarchive is a multi-format archive and compression library. An out-of-bounds read vulnerability exists in the archivereadsupportformatiso9660.c file in libarchive version 3.3.2. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

Design/Logic Flaw

libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...

ALPINE-CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

Design/Logic Flaw

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

ALPINE-CVE-2017-14503

libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...

DEBIAN-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...