CVE-2011-1778

CVE-2011-1778 is a libarchive vulnerability (affecting libarchive up to 2.8.5) described as two heap-based buffer overflows triggered by archiving inputs such as tar (and, per Scientific Linux, ISO9660 images). A remote attacker could cause an application crash or, possibly, execute arbitrary cod...

CVE-2011-1777

Multiple buffer overflows in the 1 heapaddentry and 2 relocatedir functions in archivereadsupportformatiso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted ISO9660 image...

CVE-2011-1779

CVE-2011-1779 concerns libarchive 2.8.4/2.8.5, with multiple use-after-free vulnerabilities that could be triggered by crafted TAR archives or ISO9660 images. Impact per the sources: remote denial of service (application crash) and possibly other unspecified effects. The provided documents do not...

CVE-2010-4666

CVE-2010-4666 : A buffer overflow in the libarchive library (3.0 pre-release) allows remote attackers to crash the application or cause other impact via a crafted CAB file, due to improper handling of Huffman code data in LZX data. Documented across multiple sources: Red Hat RHSA-2011:1507-01 and...

CVE-2011-1779

Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted 1 TAR archive or 2 ISO9660 image...

CVE-2010-4666

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data...

CVE-2011-1779

Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted 1 TAR archive or 2 ISO9660 image...

CVE-2011-1777

Multiple buffer overflows in the 1 heapaddentry and 2 relocatedir functions in archivereadsupportformatiso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted ISO9660 image...

CVE-2011-1778

Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TAR archive...

CVE-2011-1777

CVE-2011-1777 describes two heap-based buffer overflow flaws in libarchive’s ISO9660 handling (archive_read_support_format_iso9660.c: heap_add_entry and relocate_dir) that could crash the application or allow arbitrary code execution via a crafted ISO9660 image. Affected versions are libarchive u...

Debian Security Advisory DSA 2413-1 (libarchive)

The remote host is missing an update to libarchive announced via advisory DSA 2413-1. OpenVAS Vulnerability Test $Id: deb24131.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2413-1 libarchive Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2413-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2413-1 : libarchive - buffer overflows

Two buffer overflows have been discovered in libarchive, a library providing a flexible interface for reading and writing archives in various formats. The possible buffer overflows while reading ISO 9660 or tar streams allow remote attackers to execute arbitrary code depending on the application...

[SECURITY] [DSA 2413-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2413-1 [email protected] http://www.debian.org/security/ Luk Claes February 20, 2012 http://www.debian.org/security/faq -...

DSA-2413-1 libarchive - buffer overflows

Bulletin has no description...

[ MDVSA-2011:191 ] libarchive

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:191 http://www.mandriva.com/security/ Package : libarchive Date : December 18, 2011 Affected: Enterprise Server 5.0 Problem Description: A heap-based buffer overflow flaw was discovered in libarchive. If a...

libarchive library buffer overflow

Buffer overflow on ISO 9660 image parsing...

Mandriva Update for libarchive MDVSA-2011:190 (libarchive)

Check for the Version of libarchive OpenVAS Vulnerability Test Mandriva Update for libarchive MDVSA-2011:190 libarchive Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for libarchive MDVSA-2011:191 (libarchive)

Check for the Version of libarchive OpenVAS Vulnerability Test Mandriva Update for libarchive MDVSA-2011:191 libarchive Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Ubuntu Update for libarchive USN-1310-1

Ubuntu Update for Linux kernel vulnerabilities USN-1310-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13101.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libarchive USN-1310-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...