Lucene search
+L

6 matches found

OSV
OSV
added 2025/10/04 12:11 a.m.4 views

RLSA-2025:9431 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

4CVSS4.5AI score0.00337EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/21 1:18 p.m.2 views

OESA-2025-1312 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

7.8CVSS7.1AI score0.00337EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/21 1:18 p.m.8 views

OESA-2025-1311 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

7.8CVSS5.9AI score0.00337EPSS
SaveExploits2References3
OSV
OSV
added 2025/03/21 1:18 p.m.3 views

OESA-2025-1310 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

7.8CVSS5.9AI score0.00337EPSS
SaveExploits2References3
OSV
OSV
added 2025/03/17 4:33 p.m.16 views

MGASA-2025-0102 Updated libarchive packages fix security vulnerability

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...

7.8CVSS6.7AI score0.00337EPSS
SaveExploits1References3
securityvulns
securityvulns
added 2007/09/04 12:0 a.m.28 views

Mailmarshal mail gateway directory traversal

Vulnerable outdated ported version of 'tar' utility is used, making it's possible to overwrite system files via directory traversal vulnerability...

3.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder