1359 matches found
libarchive RAR File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of libarchive. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RAR file...
Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side-Loading Techniques
Thai government officials have emerged as the target of a new campaign that leverages a technique called DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai. "The target of the threat actors were Thailand officials based on the nature of the lures," Nikhil Hegde, senior...
The vulnerability of the execute_filter_delta function in the archive_read_support_format_rar.c component of the Libarchive library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the executefilterdelta function in the archivereadsupportformatrar.c component of the Libarchive library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, an...
The vulnerability of the execute_filter_audio function in the archive_read_support_format_rar.c library of the Libarchive library, which involves reading beyond the permissible buffer data limits, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the executefilteraudio function in the archivereadsupportformatrar.c component of the Libarchive library relates to reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, an...
MGASA-2024-0363 Updated libarchive packages fix security vulnerability
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if a specially crafted RAR archive is processed. CVE-2024-20696...
Updated libarchive packages fix security vulnerability
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if a specially crafted RAR archive is processed. CVE-2024-20696...
[SECURITY] [DLA 3950-1] libarchive security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3950-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 11, 2024 https://wiki.debian.org/LTS -...
CVE-2024-23385
Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...
CVE-2024-23385 Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...
CVE-2024-23385 Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...
CVE-2024-23385
CVE-2024-23385 affects Qualcomm closed‑source components. The issue is a Transient DoS where a modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is observed at the user equipment (UE). The connected sources confirm the affected vendor and the high availability impact, but do...
USN-7087-1: libarchive vulnerability
It was discovered that libarchive incorrectly handled certain RAR archive files. If a user or automated system were tricked into processing a specially crafted RAR archive, an attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitra...
Important: libarchive
Issue Overview: executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. CVE-2024-48957 executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds...
Fortinet Fortigate Security Best Practice: Antivirus evasion via malformed RAR file (FG-IR-20-037)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-037 advisory. - FortiClient and FortiOS AV engines may not immediately detect certain types of malformed or non-standard RAR archives,...
OESA-2024-2286 libarchive security update
is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...
execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
...
SUSE CVE-2024-48958
executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...
SUSE CVE-2024-48957
executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...