{"id":"CVE-2017-14502","aliases":["ALEA-2021:1580","ALPINE-CVE-2017-14502","DEBIAN-CVE-2017-14502","DLA-1600-1","DSA-4360-1","EUVD-2017-6004","GHSA-w2pg-4hrq-9q8x","MGASA-2019-0030","RHEA-2021:1580","SUSE-RU-2021:2757-1","SUSE-SU-2018:3571-1","SUSE-SU-2018:3640-1","SUSE-SU-2018:3640-2","SUSE-SU-2019:3092-1","UBUNTU-CVE-2017-14502","USN-3859-1"],"status":"published","title":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one...","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03367,"percentile":0.88823,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-193"],"published":"2017-09-17T00:00:00Z","modified":"2026-10-29T11:12:09Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"libarchive-devel","fixed_in":["3.3.3-1.el8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libarchive","fixed_in":["3.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libarchive","fixed_in":["3.3.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libarchive","fixed_in":["3.3.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libarchive","fixed_in":["3.2.2-4.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libarchive","fixed_in":["3.2.2-4.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libarchive","fixed_in":["3.2.2-4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libarchive","fixed_in":["3.1.2-7ubuntu2.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libarchive","fixed_in":["3.1.2-11ubuntu0.16.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libarchive","fixed_in":["3.2.2-3.1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libarchive-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-1.el8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-4.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-4.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-4.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-11+deb8u4"}]}],"versions":["3.1.2-11","3.1.2-11+deb8u1","3.1.2-11+deb8u2","3.1.2-11+deb8u3","3.1.2-11+deb8u3~bpo70+1"],"bundled":12},{"source":"osv","ecosystem":"Debian:9","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-2+deb9u1"}]}],"versions":["3.2.2-2"],"bundled":10},{"source":"osv","ecosystem":"Mageia:6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-1.4.mga6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdcat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdcpio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdtar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bsdtar-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libarchive-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libarchive-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bsdcat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bsdcpio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bsdtar-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libarchive-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libarchive-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libarchive-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.3-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-3.3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-3.3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-26.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-7ubuntu2.7"}]}],"versions":["3.1.2-5ubuntu1","3.1.2-7ubuntu1","3.1.2-7ubuntu2","3.1.2-7ubuntu2.1","3.1.2-7ubuntu2.2","3.1.2-7ubuntu2.3","3.1.2-7ubuntu2.4","3.1.2-7ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-11ubuntu0.16.04.5"}]}],"versions":["3.1.2-11build1","3.1.2-11ubuntu0.16.04.1","3.1.2-11ubuntu0.16.04.2","3.1.2-11ubuntu0.16.04.3","3.1.2-11ubuntu0.16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.1ubuntu0.2"}]}],"versions":["3.2.2-3.1","3.2.2-3.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-7ubuntu2.7"}]}],"versions":["3.1.2-5ubuntu1","3.1.2-7ubuntu1","3.1.2-7ubuntu2","3.1.2-7ubuntu2.1","3.1.2-7ubuntu2.2","3.1.2-7ubuntu2.3","3.1.2-7ubuntu2.4","3.1.2-7ubuntu2.6"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-11ubuntu0.16.04.5"}]}],"versions":["3.1.2-11build1","3.1.2-11ubuntu0.16.04.1","3.1.2-11ubuntu0.16.04.2","3.1.2-11ubuntu0.16.04.3","3.1.2-11ubuntu0.16.04.4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libarchive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.1ubuntu0.2"}]}],"versions":["3.2.2-3.1","3.2.2-3.1ubuntu0.1"],"bundled":4}],"products":[{"vendor":"libarchive","product":"libarchive"}],"references":[{"url":"https://github.com/libarchive/libarchive/commit/5562545b5562f6d12a4ef991fae158bf4ccf92b6","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3859-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://bugs.debian.org/875974","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.debian.org/security/2018/dsa-4360","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://security.gentoo.org/glsa/201908-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14502","tags":["advisory"]},{"url":"https://usn.ubuntu.com/3859-1"},{"url":"https://github.com/advisories/GHSA-w2pg-4hrq-9q8x"},{"url":"https://vulners.com/cve/CVE-2017-14502","tags":["report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-14502","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-14502","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0030.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24075","tags":["report"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHEA-2021:1580","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827927","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhea-2021_1580.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14501","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14501","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14502","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/-2021-2757/suse-ru-20212757-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188891","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18408","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183571-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1059100","tags":["report"]},{"url":"https://bugzilla.suse.com/1059134","tags":["report"]},{"url":"https://bugzilla.suse.com/1059139","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183640-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1032089","tags":["report"]},{"url":"https://bugzilla.suse.com/1037008","tags":["report"]},{"url":"https://bugzilla.suse.com/1037009","tags":["report"]},{"url":"https://bugzilla.suse.com/1057514","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10350","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183640-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193092-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1120653","tags":["report"]},{"url":"https://bugzilla.suse.com/1120654","tags":["report"]},{"url":"https://bugzilla.suse.com/1124341","tags":["report"]},{"url":"https://bugzilla.suse.com/1124342","tags":["report"]},{"url":"https://bugzilla.suse.com/1155079","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1000019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1000020","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-14502","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3859-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1000877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000880","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-14502","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2017-09-17T18:00:00Z","modified":"2024-08-05T19:27:40.816Z","updated_at":"2026-11-02T14:33:11.928814Z"}],"euvd":[{"id":"EUVD-2017-6004","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2017-09-17T18:00:00Z","modified":"2024-08-05T19:27:40Z","updated_at":"2026-11-03T02:23:16.710282Z"}],"ghsa":[{"id":"GHSA-w2pg-4hrq-9q8x","title":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one...","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2022-05-13T01:43:27Z","modified":"2025-04-20T03:46:26Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:01:52.747248Z"}],"nvd":[{"id":"CVE-2017-14502","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2017-09-17T18:29:00.263Z","modified":"2026-06-17T01:06:16.333Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125","CWE-193"],"updated_at":"2026-11-02T14:03:59.716532Z"}],"osv":[{"id":"ALPINE-CVE-2017-14502","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2017-09-17T18:29:00.263Z","modified":"2026-06-15T18:24:06.62363574Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2017-14502","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2017-09-17T18:29:00.263Z","modified":"2026-10-29T11:12:09.275405003Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.572713Z"},{"id":"DEBIAN-CVE-2017-14502","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2017-09-17T18:29:00.263Z","modified":"2026-09-01T20:03:43.960428009Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"RHEA-2021:1580","title":"Red Hat Enhancement Advisory: libarchive bug fix and enhancement update","status":"published","published":"2024-09-16T04:51:53Z","modified":"2026-06-26T12:22:17.176449653Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2017-14502","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.","status":"published","published":"2017-09-17T00:00:00Z","modified":"2026-04-22T11:16:11.585435Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"ALEA-2021:1580","title":"libarchive bug fix and enhancement update","description":"For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:34:11Z","modified":"2026-10-29T11:00:16.124542594Z","updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"DLA-1600-1","title":"libarchive - security update","status":"published","published":"2018-11-29T00:00:00Z","modified":"2026-03-09T01:20:53.992687Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4360-1","title":"libarchive - security update","status":"published","published":"2018-12-27T00:00:00Z","modified":"2026-03-09T02:10:40.03087Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0030","title":"Updated libarchive packages fix security vulnerabilities","description":"read_header in archive_read_support_format_rar.c in libarchive 3.3.2\nsuffers from an off-by-one error for UTF-16 names in RAR archives,\nleading to an out-of-bounds read in archive_read_format_rar_read_header\n(CVE-2017-14502).\n\nMultiple security issues were found in libarchive: Processing malformed\nRAR archives could result in denial of service or the execution of\narbitrary code and malformed WARC, LHarc, ISO, Xar or CAB archives could\nresult in denial of service (CVE-2018-1000877, CVE-2018-1000878,\nCVE-2018-1000879, CVE-2018-1000880).\n","status":"published","published":"2019-01-11T05:54:06Z","modified":"2026-04-16T06:25:35.756198883Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-RU-2021:2757-1","title":"Recommended update for libarchive","description":"This update for libarchive fixes the following issues:\n\nlibarchive was updated to version 3.3.3\n\n* Avoid super-linear slowdown on malformed mtree files\n* Many fixes for building with Visual Studio\n* NO_OVERWRITE doesn't change existing directory attributes\n* New support for Zstandard read and write filters\n* Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503\n- Needed by of Firefox91 (bsc#1188891)\n","status":"published","published":"2021-08-17T11:47:07Z","modified":"2026-02-04T02:59:53.326998Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2018:3571-1","title":"Security update for libarchive","description":"\nThis update for libarchive fixes the following issues:\n\n- CVE-2017-14501: An out-of-bounds read flaw existed in parse_file_info in archive_read_support_format_iso9660.c when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header. (bsc#1059139)\n- CVE-2017-14502: read_header in archive_read_support_format_rar.c suffered from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header. (bsc#1059134)\n- CVE-2017-14503: libarchive suffered from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16. (bsc#1059100)\n\n  ","status":"published","published":"2018-10-30T13:43:04Z","modified":"2026-02-04T02:14:09.858292Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3640-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n- CVE-2016-10209: The archive_wstring_append_from_mbs function in archive_string.c allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file. (bsc#1032089)\n- CVE-2016-10349: The archive_le32dec function in archive_endian.h allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. (bsc#1037008)\n- CVE-2016-10350: The archive_read_format_cab_read_header function in archive_read_support_format_cab.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. (bsc#1037009)\n- CVE-2017-14166: libarchive allowed remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c. (bsc#1057514)\n- CVE-2017-14501: An out-of-bounds read flaw existed in parse_file_info in archive_read_support_format_iso9660.c when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header. (bsc#1059139)\n- CVE-2017-14502: read_header in archive_read_support_format_rar.c suffered from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header. (bsc#1059134)\n- CVE-2017-14503: libarchive suffered from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16. (bsc#1059100)\n\n","status":"published","published":"2018-11-07T10:14:01Z","modified":"2026-02-04T04:20:05.690777Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3640-2","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\n- CVE-2016-10209: The archive_wstring_append_from_mbs function in archive_string.c allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file. (bsc#1032089)\n- CVE-2016-10349: The archive_le32dec function in archive_endian.h allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. (bsc#1037008)\n- CVE-2016-10350: The archive_read_format_cab_read_header function in archive_read_support_format_cab.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. (bsc#1037009)\n- CVE-2017-14166: libarchive allowed remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c. (bsc#1057514)\n- CVE-2017-14501: An out-of-bounds read flaw existed in parse_file_info in archive_read_support_format_iso9660.c when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header. (bsc#1059139)\n- CVE-2017-14502: read_header in archive_read_support_format_rar.c suffered from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header. (bsc#1059134)\n- CVE-2017-14503: libarchive suffered from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16. (bsc#1059100)\n\n","status":"published","published":"2018-12-06T13:20:47Z","modified":"2026-02-04T02:17:35.87339Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2019:3092-1","title":"Security update for libarchive","description":"This update for libarchive fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).\n- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).\n- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).\n- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).\n- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).\n","status":"published","published":"2019-11-28T14:44:46Z","modified":"2026-02-04T03:01:10.015504Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-3859-1","title":"libarchive vulnerabilities","description":"It was discovered that libarchive incorrectly handled certain archive files.\nAn attacker could possibly use this issue to cause a denial of service.\nCVE-2018-1000880 affected only Ubuntu 18.04 LTS and Ubuntu 18.10.\n(CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000880)\n\nIt was discovered that libarchive incorrectly handled certain archive files.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2017-14502)\n","status":"published","published":"2019-01-15T13:40:36Z","modified":"2026-04-22T09:53:41.706268Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}