Skip to content
OpenAdvisories
Unscored CVE-2019-11463 EUVD-2019-3136GHSA-v36x-fh5g-gvf8

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to ca…

Published Apr 23, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

References