Summary
It was discovered that libarchive incorrectly handled certain archive files.
An attacker could possibly use this issue to cause a denial of service.
CVE-2018-1000880 affected only Ubuntu 18.04 LTS and Ubuntu 18.10.
(CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000880)
It was discovered that libarchive incorrectly handled certain archive files.
An attacker could possibly use this issue to expose sensitive information.
This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
(CVE-2017-14502)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libarchive | 3.1.2-7ubuntu2.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | libarchive | 3.1.2-11ubuntu0.16.04.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | libarchive | 3.2.2-3.1ubuntu0.2 |
Vulnerabilities 4
-
Unscored —
read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names …
-
Unscored —
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415:…
-
Unscored —
libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416:…
-
Unscored —
libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: …