Libarchive@3.2.2 Security Vulnerabilities and Issues — Libarchive@3.2.2 CVE List

Lucene search

LibarchiveLibarchive3.2.2

4 matches found

CVE•added 2017/01/27 10:59 p.m.•124 views

CVE-2017-5601

An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

7.5CVSS6.6AI score0.0052EPSS

CVE•added 2017/05/01 1:59 a.m.•99 views

CVE-2016-10349

The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

5.5CVSS6AI score0.00228EPSS

CVE•added 2017/05/01 1:59 a.m.•93 views

CVE-2016-10350

The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

5.5CVSS5.9AI score0.00242EPSS

CVE•added 2017/04/03 5:59 a.m.•83 views

CVE-2016-10209

The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.

5.5CVSS5.8AI score0.00226EPSS