Lucene search
K

8 matches found

OSV
OSV
added 2026/02/09 5:32 p.m.4 views

CLSA-2025-1766232351 libarchive: Fix of 3 CVEs

CVE-2025-5916: fix signed integer overflow in WARC format reader - CVE-2025-5917: fix buffer overflow in buildustarentry for PAX format - CVE-2025-5918: prevent skipping past EOF in archive file reading...

6.6CVSS6.3AI score0.00333EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.4 views

EulerOS Virtualization 2.10.1 : libarchive (EulerOS-SA-2026-1125)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...

7.8CVSS6.7AI score0.00333EPSS
Exploits3References6
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:0 a.m.6 views

EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2025-2135)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially...

7.8CVSS6.7AI score0.00333EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2025-2044)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and...

7.8CVSS6.7AI score0.00333EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.6 views

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2025-2013)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and...

7.8CVSS6.7AI score0.00333EPSS
Exploits2References5
OSV
OSV
added 2025/08/20 9:46 a.m.1 views

SUSE-SU-2025:02718-2 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

7.8CVSS6.5AI score0.00333EPSS
Exploits2References11
SUSE Linux
SUSE Linux
added 2025/08/14 10:15 a.m.2 views

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2025-5918: reading past EOF may be triggered for piped file streams bsc1244279 CVE-2025-5917: off by one error in buildustarentryname at archivewritesetformatpax.c bsc1244336 CVE-2025-5916: integer overflow while reading warc files at...

7.3CVSS7.5AI score0.00333EPSS
Exploits2References20
OSV
OSV
added 2025/06/09 8:15 p.m.2 views

AZL-63774 CVE-2025-5916 affecting package libarchive for versions less than 3.7.7-3

A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...

5.6CVSS6.3AI score0.00151EPSS
Exploits0References1
Rows per page
Query Builder