High DLA-3950-1 4 CVEs

libarchive - security update

Published Nov 11, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	libarchive	3.4.3-2+deb11u2

Vulnerabilities 4

High 7.3

CVE-2024-20696 Public exploit

Windows libarchive Remote Code Execution Vulnerability

Windows libarchive Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Debian Ubuntu Alpine

Jan 9, 2024
Unscored —

CVE-2021-36976

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

libarchive libarchive libarchive libarchive Debian Ubuntu Azure Linux Alpine

Jul 20, 2021
Unscored —

CVE-2022-26280

Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.

libarchive libarchive libarchive libarchive Debian Ubuntu Azure Linux Alpine

Mar 28, 2022
Unscored —

CVE-2022-36227

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with…

libarchive libarchive libarchive libarchive Debian Ubuntu Azure Linux Alpine Wolfi

Nov 22, 2022