libarchive: arbitrary code execution

A vulnerability was found in libarchive. A specially crafted zip file can provide an incorrect compressed size, which may allow an attacker to place arbitrary code on the heap and execute it in the context of the application...

PT-2016-6806

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.1 Description The issue is related to an integer overflow in the ISO9660 writer, which can be triggered by verifying filename lengths when writing an ISO9660 archive. This can lead to a buffer overflow, causing...

PT-2016-4060 · Libarchive +2 · Libarchive +2

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service crash via crafted cab files. This is related to "overlapping memcpy" in the archive string append function in archive string.c...

PT-2016-4062

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to a memory leak in the archive read get extract function in archive read extract2.c in libarchive. This memory leak allows remote attackers to cause a denial of service via a...

PT-2016-5881

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.1 Description The issue is related to a stack-based buffer overflow in the parse device function, which can be triggered by a crafted mtree file. This allows remote attackers to execute arbitrary code...

PT-2016-6415

Name of the Vulnerable Software and Affected Versions libarchive versions 3.2.0 and earlier Description The issue is related to the sandboxing code in libarchive, which incorrectly handles hardlink archive entries with non-zero data size. This could potentially allow remote attackers to write to...

PT-2016-4061

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds heap read and crash, by providing a crafted zip file. This is related to the reading of the password i...

CVE-2016-5844

Undefined behavior signed integer overflow was discovered in libarchive, in the ISO parser. A crafted file could potentially cause denial of service...

Libarchive Integer Overflow Vulnerability

libarchive is a multi-format archive and compression library. An integer overflow vulnerability exists in libarchive 3.2.0 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted files...

openSUSE Security Update : libarchive (openSUSE-2016-770)

libarchive was updated to fix one security issue. This security issue was fixed : - CVE-2016-4809: Memory allocation error with gigantic symbolic links in cpio archives bsc984990. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Open-source compression library Libarchive exposed high-risk vulnerabilities, affect the Debian Linux, FreeBSD, etc. a large number of products-vulnerability warning-the black bar safety net

! The recent Libarchive has been exposed security vulnerabilities--Libarchive is an open source compression Library, for a variety of different file archive formats. Libarchive application range is very wide, therefore, so a large number of natural also will be affected, such as Debian Linux,...

Heap-buffer-overflow in archive_le16dec

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4847487944753152 Fuzzer: libFuzzerlibarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62100001650...

Heap-buffer-overflow in archive_le16dec

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4787859840040960 Fuzzer: libFuzzerlibarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61500000f28...

CVE-2016-5844

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file...

PT-2016-6712

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.1 Description The issue is related to an integer overflow in the ISO parser, which can be triggered by a crafted ISO file. This can cause a denial of service, resulting in an application crash. Recommendations...

openSUSE Security Update : libarchive (openSUSE-2016-762)

This update for libarchive fixes the following issue : - Fix a heap-based buffer overflow CVE-2016-1541, bsc979005 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

UBUNTU-CVE-2016-5844

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file...

FreeBSD : libarchive -- multiple vulnerabilities (4a0d9b53-395d-11e6-b3c8-14dae9d210b8)

Hanno Bock and Cisco Talos report : - Out of bounds heap read in RAR parser - Signed integer overflow in ISO parser - TALOS-2016-0152 CVE-2016-4300: 7-Zip readSubStreamsInfo Integer Overflow - TALOS-2016-0153 CVE-2016-4301: mtree parsedevice Stack Based Buffer Overflow - TALOS-2016-0154...

CVE-2015-8934

A vulnerability was found in libarchive. A specially crafted RAR file could cause the application to read memory beyond the end of the decompression buffer...

CVE-2015-8930

A vulnerability was found in libarchive. A specially crafted ISO file could cause the application to consume resources until it hit a memory limit, leading to a crash or denial of service...