Denial Of Service (DoS) Through Heap Buffer Overflow

🗓️ 18 Apr 2018 07:13:15Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Denial Of Service vulnerability in libarchive.s

Reporter	Title	Published	Views	Family All 76
AlpineLinux	CVE-2017-14166	6 Sep 201718:00	–	alpinelinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Watson Explorer (CVE-2017-14166, CVE-2017-14501, CVE-2017-14502, CVE-2017-14503)	29 Mar 201908:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from libcurl, openssl, gnutls, libarchive and libsepol	19 Jun 202312:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container images may be vulnerable to denial of service due to libarchive [CVE-2017-14166]	28 Mar 202310:20	–	ibm
BDU FSTEC	The vulnerability of the atol8 function in the libarchive library, which allows a hacker to cause a service failure	6 Mar 201900:00	–	bdu_fstec
Cloud Foundry	USN-3736-1: libarchive vulnerabilities \| Cloud Foundry	11 Sep 201800:00	–	cloudfoundry
CNVD	libarchive xml_data Denial of Service Vulnerability	7 Sep 201700:00	–	cnvd
CVE	CVE-2017-14166	6 Sep 201718:00	–	cve
Cvelist	CVE-2017-14166	6 Sep 201718:00	–	cvelist
Debian	[SECURITY] [DLA 1092-1] libarchive security update	8 Sep 201709:00	–	debian

Vulners

Node

OR

AND

libarchive libarchiveMatch3.2.2-r2cpp

alpinelinux alpine_linuxMatch3.5

OR

libarchive.so libarchive.soMatch2.8.3cpp

libarchive libarchiveMatch3.1.2_12.el7

libarchive libarchiveMatch2.8.3_3.el6_1

libarchive libarchiveMatch2.8.3_7.el6_8

libarchive libarchiveMatch3.3.2_8.el8_1

libarchive libarchiveMatch3.3.2_9.el8

libarchive libarchiveMatch3.1.2_14.el7_7

libarchive libarchiveMatch3.1.2_10.el7_2

libarchive libarchiveMatch3.3.2_7.el8

libarchive libarchiveMatch2.8.3_4.el6_2

libarchive libarchiveMatch3.3.2_3.el8

libarchive libarchiveMatch2.8.3_2.el6

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/libarchive/libarchive/commit/fa7438a0ff4033e4741c807394a9af6207940d71
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00037.html
debian	www.debian.org/security/2018/dsa-4360
security	www.security.gentoo.org/glsa/201908-11
blogs	www.blogs.gentoo.org/ago/2017/09/06/libarchive-heap-based-buffer-overflow-in-xml_data-archive_read_support_format_xar-c/
usn	www.usn.ubuntu.com/3736-1/

15 Aug 2019 21:58Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24.3

CVSS 36.5

EPSS0.03211

denial of service heap buffer overflow libarchive.