Unscored USN-4169-1 1 CVE

libarchive vulnerability

Published Oct 29, 2019 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libarchive incorrectly handled certain archive files.
An attacker could possibly execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	libarchive	3.1.2-11ubuntu0.16.04.7
Ubuntu · 18.04 LTS 18.04:LTS	libarchive	3.2.2-3.1ubuntu0.5
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	libarchive	3.1.2-7ubuntu2.8+esm1

Vulnerabilities 1

Unscored —

CVE-2019-18408

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free …

libarchive libarchive libarchive Debian Ubuntu Alpine

Oct 24, 2019

References

report
https://ubuntu.com/security/CVE-2019-18408