{"id":"CVE-2026-78322","aliases":["DEBIAN-CVE-2026-78322","EUVD-2026-65311","GHSA-qgv9-pfrp-f7x5","OESA-2026-3803","OESA-2026-3804","OESA-2026-3805","OESA-2026-3806","OESA-2026-3903","SUSE-SU-2026:3960-1","SUSE-SU-2026:4007-1","UBUNTU-CVE-2026-78322","openSUSE-SU-2026:21667-1"],"status":"published","title":"File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00328,"percentile":0.26186,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2026-08-25T07:21:38Z","modified":"2026-11-06T00:53:56Z","fixes":[{"ecosystem":"Debian:14","package":"file-roller","fixed_in":["44.7-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"file-roller","fixed_in":["3.30.1-4.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"file-roller","fixed_in":["3.38.1-2.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"file-roller","fixed_in":["43.0-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"file-roller","fixed_in":["43.0-3.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"file-roller","fixed_in":["43.0-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"file-roller","fixed_in":["3.20.3-15.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"file-roller","fixed_in":["43.1-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"file-roller","fixed_in":["44.5-bp160.2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["43.0-1","43.1-1","44-1","44-2","44.1-1","44.3-1","44.4-1","44.5-1","44.6-1","44.6-2","44.6-3","44.6-4","44.6-5","44.7-1","44~beta-1"]},{"source":"osv","ecosystem":"Debian:13","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["44.5-1","44.6-1","44.6-2","44.6-3","44.6-4","44.6-5","44.7-1"]},{"source":"osv","ecosystem":"Debian:14","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.7-1"}]}],"versions":["44.5-1","44.6-1","44.6-2","44.6-3","44.6-4","44.6-5"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-4.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.38.1-2.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.0-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.0-3.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.0-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.3-15.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.1-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.16.4-1ubuntu3","3.16.5-0ubuntu1","3.16.5-0ubuntu1.1","3.16.5-0ubuntu1.2","3.16.5-0ubuntu1.3","3.16.5-0ubuntu1.4","3.16.5-0ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.26.1-0ubuntu1","3.26.2-0ubuntu1","3.26.2-3ubuntu1","3.28.0-1ubuntu1","3.28.0-1ubuntu1.1","3.28.0-1ubuntu1.2","3.28.0-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.32.2-1","3.32.3-1","3.35.90-1","3.35.91-1","3.35.92-1","3.36.0-1","3.36.1-1","3.36.1-1ubuntu0.1","3.36.2-0ubuntu1","3.36.3-0ubuntu1","3.36.3-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.40.0-2","3.40.0-3","3.40.0-4","3.41.90-1","3.42.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["43.0-1","43.1-1","43.1-1build1","43.1-1build2","44.1-1","44.3-0ubuntu1","44.3-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["44.5-1","44.6-1","44.6-2","44.6-3"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"file-roller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.5-bp160.2.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-78322","tags":["vdb-entry","x_refsource_REDHAT","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521767","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.gnome.org/GNOME/file-roller/-/commit/ffb76dc866342cef6a4914873faaa880d14d5aa4","tags":["fix"]},{"url":"https://gitlab.gnome.org/GNOME/file-roller/-/issues/327","tags":["exploit","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78322","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qgv9-pfrp-f7x5"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/78xxx/CVE-2026-78322.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-78322","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3803","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3804","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3805","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3806","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3903","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263960-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276442","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78322","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264007-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-78322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-78322","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-78322","title":"File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","status":"published","published":"2026-08-25T07:21:38.573Z","modified":"2026-11-06T00:53:56.531Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-06T01:55:46.939755Z"}],"euvd":[{"id":"EUVD-2026-65311","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","status":"published","published":"2026-08-25T07:21:38Z","modified":"2026-11-06T00:53:56Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T02:02:53.341523Z"}],"ghsa":[{"id":"GHSA-qgv9-pfrp-f7x5","title":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive...","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","status":"published","published":"2026-08-25T09:30:38Z","modified":"2026-08-25T09:30:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:10:56.831918Z"}],"nvd":[{"id":"CVE-2026-78322","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","status":"published","published":"2026-08-25T08:18:10.583Z","modified":"2026-11-06T01:17:52.137Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-06T06:59:04.972571Z"}],"osv":[{"id":"CVE-2026-78322","title":"File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","status":"published","published":"2026-08-25T07:21:38.573Z","modified":"2026-11-07T07:03:44.087115407Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-07T03:08:10.640883Z"},{"id":"DEBIAN-CVE-2026-78322","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","status":"published","published":"2026-08-25T08:18:10.583Z","modified":"2026-10-01T03:03:42.447907658Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:46:03.502256Z"},{"id":"OESA-2026-3803","title":"file-roller security update","description":"File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller\u0026apos;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.(CVE-2026-78322)","status":"published","published":"2026-09-14T16:34:31Z","modified":"2026-09-13T16:45:42.021177258Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3804","title":"file-roller security update","description":"File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller\u0026apos;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.(CVE-2026-78322)","status":"published","published":"2026-09-14T16:34:32Z","modified":"2026-09-13T16:45:41.661517654Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3805","title":"file-roller security update","description":"File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller\u0026apos;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.(CVE-2026-78322)","status":"published","published":"2026-09-14T16:34:32Z","modified":"2026-09-13T16:45:41.660346039Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3806","title":"file-roller security update","description":"File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller\u0026apos;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.(CVE-2026-78322)","status":"published","published":"2026-09-14T16:34:32Z","modified":"2026-09-13T16:45:40.57311871Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3903","title":"file-roller security update","description":"File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller\u0026apos;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.(CVE-2026-78322)","status":"published","published":"2026-09-20T13:23:05Z","modified":"2026-09-20T13:30:23.698666665Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"UBUNTU-CVE-2026-78322","description":"A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.","status":"published","published":"2026-08-25T08:18:00Z","modified":"2026-09-11T20:53:36.557210168Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:57:18.015985Z"},{"id":"openSUSE-SU-2026:21667-1","title":"Security update for file-roller","description":"This update for file-roller fixes the following issues:\n\nChanges in file-roller:\n\n- CVE-2026-78322: Check line length when parsing command output (bsc#1276442).\n","status":"published","published":"2026-08-27T16:23:29Z","modified":"2026-08-28T17:30:03.726713467Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:3960-1","title":"Security update for file-roller","description":"This update for file-roller fixes the following issue:\n\n- CVE-2026-78322: stack buffer overflow in parse_progress_line for 7z and RAR handlers (bsc#1276442).\n","status":"published","published":"2026-09-03T13:32:33Z","modified":"2026-09-13T18:23:12.444216572Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4007-1","title":"Security update for file-roller","description":"This update for file-roller fixes the following issue:\n\n- CVE-2026-78322: stack buffer overflow in parse_progress_line for 7z and RAR handlers (bsc#1276442).\n","status":"published","published":"2026-09-07T07:32:45Z","modified":"2026-09-13T18:23:15.159265208Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}