26 results · Feed
-
Medium 4.0
list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to …
-
Low 3.3
libarchive bsdunzip.c list null pointer dereference
A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The e…
-
Medium 4.0
libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c …
-
High 7.8
execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a …
-
High 7.8
execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a …
-
High 7.8CVE-2024-26256 EPSS 88%
Libarchive Remote Code Execution Vulnerability
Libarchive Remote Code Execution Vulnerability
-
High 7.3CVE-2024-20696 Public exploit
Windows libarchive Remote Code Execution Vulnerability
Windows libarchive Remote Code Execution Vulnerability
-
Unscored —
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with…
-
Unscored —
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control…
-
Unscored —
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
-
Unscored —
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
-
Unscored —
archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupt…
-
Unscored —
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorr…
-
Unscored —
archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free …
-
Unscored —
libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c wh…
-
Unscored —
An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when …
-
Unscored —
read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names …
-
Unscored —
libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and applica…
-
Unscored —
An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote…
-
Unscored —
Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 …
-
Unscored —
The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allo…
-
Unscored —
Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 a…
-
Unscored —
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service …
-
Unscored —
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (app…
-
Unscored —
The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote a…
-
Unscored —CVE-2016-1541 EPSS 10%
Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive bef…